CVE-2021-44049: Cyberark Endpoint Privilege Manager

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory.

Affected products

• Cyberark Endpoint Privilege Manager: from 11.5.3.328, before 11.5.4.355 (fixed in 11.5.4.355); from 11.5.3.328, before 11.5.4.500 (fixed in 11.5.4.500)

Published 2022-01-15. Last modified 2026-06-17.