undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
CVE-2026-16729
Summary
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
Products covered
Sysinternals Suite
Remediation
See the Microsoft Security Update Guide for the update that applies to your product.
Vendor-listed fixes
1.03
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.