CVE-2020-6014: Check Point Endpoint Security

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Affected products

• Check Point Endpoint Security: before e83.20 (fixed in e83.20)

Published 2020-11-02. Last modified 2026-06-17.