CVE-2026-10847

Katalog CVE

CVSS 7.8 · High EPSS 0,12%

Kerentanan Uncontrolled Search Path Element. Skor CVSS 3.1 7.8 (High) menurut checkpoint.com.

Deskripsi (NVD)

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.

Rincian

Terbit di NVD

11 Juni 2026

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

7.8 (High), sumber checkpoint.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,12% peluang dieksploitasi; lebih tinggi dari 1,8% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://support.checkpoint.com/results/sk/sk185052