RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey Windows...
Product
sysinternals regmon vulnerabilities
2 published CVES affecting sysinternals regmon, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 2
- Unscored
- 0
- CISA KEV
- 0
Latest sysinternals regmon CVEs
Newest publication first
-
LowCVSS 1.9 EPSS 0.28%
-
LowCVSS 2.1 EPSS 0.85% PoC
NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.