checkpoint Harmony Endpoint. vulnerabilities

Latest checkpoint Harmony Endpoint. CVEs

Newest publication first

1. CVE-2024-24912 Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file

   Published 2024-05-01

   Medium·CVSS 6.7 EPSS 0.16%

   A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.

2. CVE-2023-28134 Local Privliege Escalation in Check Point Endpoint Security Remediation Service

   Published 2023-11-12

   High·CVSS 7.8 EPSS 0.24%

   Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

3. CVE-2022-23744 Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.

   Published 2022-07-07

   Low·CVSS 2.3 EPSS 4.6%

   Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.