Uncontrolled Search Path Vulnerability in Trellix Agent for Windows

CVE-2022-3859

What is CVE-2022-3859?

An uncontrolled search path vulnerability is present in Trellix Agent for Windows versions before 5.7.8. This flaw allows an attacker, granted admin access, to place a malicious DLL in a restricted System folder. Doing so can lead to privilege escalation, granting the attacker System-level permissions which can potentially compromise the entire system security.

References