CVE-2022-38775: Elastic Endpoint Security

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected products

• Elastic Endpoint Security: before 8.4.1 (fixed in 8.4.1)

Published 2023-01-26. Last modified 2026-06-17.