Check Point Endpoint Security Clients vulnerabilities

3 CVEs affecting Check Point Endpoint Security Clients, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-8463, published 2019-12-23.

More from Check Point.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-8463, published 2019-12-23. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file to be written to non-standard locations.
• CVE-2019-8459, published 2019-06-20. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed…
• CVE-2019-8458, published 2019-06-20. Medium severity, CVSS 4.4. EPSS: 1% chance of exploitation in the next 30 days. Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with…