VULNERABILITY INTELLIGENCE
CVE-2022-23714
CVSS score7.8 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2022-07-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Primary references
- security@elastic.co — Mitigation, Vendor Advisory
- security@elastic.co — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory