Skip to content
OpenAdvisories
Unscored CVE-2022-23714 EUVD-2022-28650GHSA-v4wm-hvmw-84h7

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which…

Published Jul 6, 2022 · Updated Aug 3, 2024 · Assigned by elastic

Description

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected products

VendorProductAffectedFixed
Elastic Endpoint Security Versions 7.13.0 through 7.17.4 and 8.0.0 through 8.2.3 —

References