CVE-2004-1748: Sysinternals Regmon

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue.

Affected products

• Sysinternals Regmon: up to and including 6.11

Published 2004-12-31. Last modified 2026-06-16.