A stack-based buffer overflow flaw exists in the Microsoft SysInternals Suite that lets an attacker who has already authorized local access run code with higher privileges. The overflow can lead to arbitrary code execution in the context of the current user, enabling elevation of privileges to administrator or higher. This issue is classified as CWE-121, indicating a classic stack corruption vulnerability.

The vulnerability affects Microsoft’s SysInternals Suite on Windows. No specific product versions were identified in the advisory; any system running the Suite may be impacted until the vendor releases a patch.

The CVSS score of 7.3 indicates a high severity for local attacks. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed exploit in the wild yet. An authorized local user can trigger the flaw by executing a SysInternals utility with crafted input, granting them elevated privileges without needing remote access or elevated permissions initially.