CVE-2019-8458 - CVE House
Back to Database
Status published Medium CVE-2019-8458

Check Point Endpoint Security Client for Windows, with Anti-Malware blade...

Vulnerability Description

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8458

Credits & Attribution

No credits recorded in the NVD database.

References

More from Check Point

View All →
CVE-2024-6233
Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability
High 7.8
CVE-2019-8463
A denial of service vulnerability was reported in Check Point...
High 7.5
CVE-2019-8459
Check Point Endpoint Security Client for Windows, with the VPN...
Critical 9.8
CVE-2019-8456
Check Point IKEv2 IPsec VPN up to R80.30, in some...
Medium 5.9
CVE-2019-8454
A local attacker can create a hard-link between a file...
High 7

Affected Vendor

Check Point

View all reports →

Affected Software

Check Point Endpoint Security Client for Windows, Anti-Malware blade
Vulnerable Versions:
before E81.00

Timeline

Official Publish: June 20th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-114

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.