Sysinternals

sysinternals

4 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Process Explorer

process_explorer

Process Monitor

process_monitor

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-4972 1Sysinternals 1Regmon Apr 23, 2026 Sep 19, 2007 N/A· v4 N/A· v3 1.9 LOW· v2 RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel...Show more RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey Windows Native API functions.Show less
CVE-2007-4969 1Sysinternals 1Process Monitor Apr 23, 2026 Sep 19, 2007 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges v...Show more Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtLoadKey, (4) NtOpenKey, (5) NtQueryValueKey, (6) NtSetValueKey, and (7) NtUnloadKey.Show less
CVE-2005-2679 1Sysinternals 1Process Explorer Apr 16, 2026 Aug 23, 2005 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.
CVE-2004-1748 1Sysinternals 1Regmon Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 2.1 LOW· v2 NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue.