Privilege Escalation Vulnerability in Elastic Endpoint Security for Windows

CVE-2022-38775

What is CVE-2022-38775?

A vulnerability was identified in the rollback feature of Elastic Endpoint Security for Windows, allowing unprivileged users to gain elevated privileges, potentially giving them control over sensitive system functions as if they were the LocalSystem account. This poses a significant risk for organizations relying on this software for endpoint protection, as it could be exploited to perform unauthorized actions and compromise system integrity.

References