Medium severity · published Oct 8, 2026
CVE-2026-106177
HP Sure Click Kernel Buffer Overflow
6.4
CVSS
0.1%
EPSS
No
On KEV
Description
A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
HP Sure Click Enterprise · HP Inc
before 4.4.33 · source: vendor
HW
HP Wolf Pro Security · HP Inc
before 4.4.33 · source: vendor
HW
HP Wolf Pro Security Edition · HP Inc
before 4.4.33 · source: vendor
HW
HP Wolf Security for Business · HP Inc
before 4.4.33 · source: vendor