CVE-2019-8458CWE-114

CVE-2019-8458: vulnerability in Check Point Endpoint Security Client for…

Published · Updated

Follow this CVE+ Monitor Check Point Endpoint Security Client for Windows, Anti-Malware blade

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.
Affected products
Check Point · Check Point Endpoint Security Client for Windows, Anti-Malware blade