CVE-2022-23742: Check Point Endpoint Security

High severity, CVSS 7.8. EPSS: 4.2% chance of exploitation in the next 30 days.

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.

Affected products

• Check Point Endpoint Security: before e86.40 (fixed in e86.40)

Published 2022-05-12. Last modified 2026-06-17.