CVE-2022-38777: Elastic Endgame

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected products

• Elastic Endgame: before 3.62.3 (fixed in 3.62.3)
• Elastic Endpoint Security: before 7.17.9 (fixed in 7.17.9); from 8.0.0, before 8.5.0 (fixed in 8.5.0)

Published 2023-02-08. Last modified 2026-06-17.