Endpoint Security vulnerabilities

2 known vulnerabilities in Endpoint Security from Check Point. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Harmony Endpoint.: Incorrect Permission Assignment for Critical Resource

  CVE-2023-28134Nov 12, 2023Check Point

  Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

• 7.8 High severity

  Check Point Endpoint Security Client for Windows: Improper Link Resolution Before File Access

  CVE-2022-23742May 12, 2022Check Point Endpoint Security Client for WindowsEPSS 4.17%

  Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpat