Trellix

Endpoint Security

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.7

CVE-2025-0664

  • EPSS 0.05%
  • Published 21.07.2025 07:15:23
  • Last modified 22.07.2025 13:06:07

A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTE...

7.8

CVE-2023-3665

  • EPSS 0.08%
  • Published 04.10.2023 15:15:12
  • Last modified 21.11.2024 08:17:47

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.

6

CVE-2022-4326

  • EPSS 0.01%
  • Published 16.12.2022 16:15:25
  • Last modified 21.11.2024 07:35:03

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied perm...