HP Sure Click < 4.4.33 Kernel Buffer Overflow PrivEsc
CVE-2026-106177 Published on October 8, 2026

HP Sure Click Kernel Buffer Overflow
A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.

NVD

Vulnerability Analysis

CVE-2026-106177 can be exploited with local system access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().


Affected Versions

HP Inc HP Sure Click Enterprise: HP Inc HP Wolf Security for Business: HP Inc HP Wolf Pro Security: HP Inc HP Wolf Pro Security Edition:

Exploit Probability

EPSS
0.10%
Percentile
0.92%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.