Skip to content
OpenAdvisories
High · 7.8 CVE-2022-38777 EUVD-2022-41340GHSA-x4cg-qw8v-hq66

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate t…

Published Feb 8, 2023 · Updated Mar 25, 2025 · Assigned by elastic

Vendor: Elastic Product: Elastic Endpoint Security

Description

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected products

VendorProductAffectedFixed
Elastic Elastic Endpoint Security Elastic Security versions up to 7.17.8 and 8.4.3 and Elastic Endgame versions up to 3.62.2 —

References