CVE-2023-0977: Trellix Agent

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable.

Affected products

• Trellix Agent: up to and including 5.7.8

Published 2023-04-03. Last modified 2026-06-17.