Local Privilege Escalation in Trellix Agent for Windows by Trellix

CVE-2023-0975

Summary

A security vulnerability exists in Trellix Agent for Windows that permits local users to manipulate the install or upgrade process. Specifically, during this workflow, a user may replace one of the Agent's critical executables prior to its execution, potentially allowing the user to gain elevated permissions on the system. This creates significant security risks and requires immediate attention from system administrators and users reliant on this software.

References