CVE-2022-38774: Elastic Endgame

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected products

• Elastic Endgame: up to and including 3.62.2
• Elastic Endpoint Security: before 7.17.7 (fixed in 7.17.7); from 8.0.0, before 8.4.0 (fixed in 8.4.0)

Published 2023-01-26. Last modified 2026-06-17.