CVE-2022-23714observed exploitationCWE-264

CVE-2022-23714: vulnerability in Elastic Endpoint Security

Published · Updated

Follow this CVE+ Monitor Elastic Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 0.2%
from disclosure to weapon
Published on NVDJul 6
VulnCheck+195d
A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Affected products
Elastic · Endpoint Security