Is CVE-2026-107782 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-107782?

CVE-2026-107782 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-107782

Description

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM.