CVE-2023-3665: Trellix Endpoint Security

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.

Affected products

• Trellix Endpoint Security: up to and including 10.7.0

Published 2023-10-04. Last modified 2026-06-17.