VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Nov 30, 2022· Updated Jun 17, 2026

CVE-2022-3859

CVE-2022-3859

Description

An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there.

Affected products

3
  • Trellix/Agent3 versions
    cpe:2.3:a:trellix:agent:*:*:*:*:windows:*:*:*+ 2 more
    • cpe:2.3:a:trellix:agent:*:*:*:*:windows:*:*:*range: <5.7.8
    • (no CPE)range: <5.7.8
    • (no CPE)range: 5.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.