EUVD-2026-54354
GHSA-3j3c-5632-g52j
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local vector confirmed; low privilege sufficient; no scope change as impact is contained to vulnerable system; full CIA impact consistent with privilege escalation to service account.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
5DescriptionCVE.org
A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks.
AnalysisAI
Local privilege escalation in StableBit Scanner 2.6.13.4088 allows a low-privileged Windows user to exploit permission misconfigurations in Scanner.Service.exe - the Windows service component of the disk health monitoring tool - to achieve high confidentiality, integrity, and availability impact on the local system. The exploit reference titles the technique as 'local privilege escalation via insecure deserialization,' suggesting the ScannerService's IPC or communication surface deserializes attacker-controlled data without adequate permission enforcement. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local authenticated access to the Windows system with at minimum a low-privilege user account (PR:L confirmed by CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N with VC:H/VI:H/VA:H) scores 7.1 and carries E:P (proof-of-concept exploit confirmed), indicating a meaningful real-world risk for environments where StableBit Scanner is deployed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A low-privileged Windows user on a workstation or server with StableBit Scanner installed sends a crafted payload to the ScannerService IPC interface (likely a named pipe or local COM endpoint) that triggers insecure deserialization within Scanner.Service.exe. Because the service runs under a high-privilege account and improperly enforces caller permissions, the deserialized payload executes in the service's security context, granting the attacker SYSTEM-level or equivalent privilege. … |
| Remediation | No vendor-released patch or exact fix version is identified in the available data - all references point to VulDB and a third-party PoC page, with no StableBit vendor advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a full inventory of systems running StableBit Scanner 2.6.13.4088 and assess which are exposed to potentially untrusted local users; prioritize systems storing sensitive data or providing critical services. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-275 – Permission Issues
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today