Local Privilege Escalation in Trellix Agent for Windows by Trellix
CVE-2023-0975
8.2HIGH
What is CVE-2023-0975?
A security vulnerability exists in Trellix Agent for Windows that permits local users to manipulate the install or upgrade process. Specifically, during this workflow, a user may replace one of the Agent's critical executables prior to its execution, potentially allowing the user to gain elevated permissions on the system. This creates significant security risks and requires immediate attention from system administrators and users reliant on this software.
Affected Version(s)
Trellix Agent Windows 5.7.8 <= 5.7.8