IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.5Hoch

CVE-2025-9142Local privilege escalation in Harmony SASE Windows Agent

checkpoint Hramony SASE Veröffentlicht: (vor 9 Monaten)

Beschreibung

A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.

Schwachstellentyp (CWE): CWE-22

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
checkpoint Hramony SASE Check Point Harmony SASE Windows Agent versions prior to 12.2

Referenzen und Patches

Neue CVEs im selben Produkt — Check Point

9.8Kritisch
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS
9.3Kritisch
CVE-2026-18574

Authentication Bypass in Check Point Security Management Server

checkpoint Security Management Server; checkpoint Multi-Domain Security Management Server

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the S…