CVE-2022-23714: Elastic Endpoint Security

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected products

• Elastic Endpoint Security: from 7.13.0, up to and including 7.17.4; from 8.0.0, up to and including 8.2.3

Published 2022-07-06. Last modified 2026-06-17.