High severity7.8NVD Advisory· Published May 12, 2022· Updated Jun 2, 2026

CVE-2022-23742

Description

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.

Affected products

Checkpoint/Endpoint Security
cpe:2.3:a:checkpoint:endpoint_security:*:*:*:*:*:*:*:*
Range: <e86.40
Checkpoint/Endpoint Security Initial Client for Windowsllm-fuzzy
Range: <E86.40

Patches

Vulnerability mechanics

References

supportcontent.checkpoint.com/solutionsnvdVendor Advisory
supportcontent.checkpoint.com/solutionsnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000