Endpoint Security vulnerabilities

2 known vulnerabilities in Endpoint Security from Trellix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with…

  CVE-2025-14963Feb 24, 2026Trellix

  A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver (BYOVD) was leveraged to gain access to the critic

• 7.8 High severity

  Trellix Endpoint Security: Improper Control of Generation of Code

  CVE-2023-3665Oct 4, 2023Trellix

  A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.