---
id: CVE-2026-106177
title: >-
  A kernel buffer overflow vulnerability in HP Sure Click versions prior to
  4.4.33 may allow local privilege escalation or arbitrary code execution
summary: >-
  A kernel buffer overflow vulnerability in HP Sure Click versions prior to
  4.4.33 may allow local privilege escalation or arbitrary code execution. HP
  has released version 4.4.33 to address this vulnerability.
severity: medium
cvss: 6.4
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-122
vendor: HP Inc
product: HP Sure Click Enterprise
affected:
  - hp_sure_click_enterprise < 4.4.33
  - hp_wolf_security_for_business < 4.4.33
  - hp_wolf_pro_security < 4.4.33
  - hp_wolf_pro_security_edition < 4.4.33
published: '2026-10-08'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T21:03:43.847'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-106177'
references:
  - url: 'https://support.hp.com/us-en/document/ish_15759419-15759442-16/hpsbhf04157'
    label: hp-security-alert@hp.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-08T16:37:44.443606Z'
ingestedAt: '2026-10-08T15:49:37.996Z'
---

## Overview

A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.