CVE-2019-8461

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with write permissions to the user.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-114CWE-426

Affected software

No affected versions have been published.

Timeline

Published
Aug 29, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-84627.5In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique coCVE-2019-84637.5A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service lCVE-2019-85023.3An API issue existed in the handling of dictation requests. This issue was addressed with improved validation. This issue is fixed in iOS 12CVE-2019-85038.8A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCCVE-2019-85045.5A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A local usCVE-2019-85056.1A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a CVE-2019-85068.8A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTCVE-2019-85075.5Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.4. Processing malCVE-2019-85087.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. Mounting a maliciously crafted NCVE-2019-85097.8This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and SecurCVE-2019-85105.5An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issCVE-2019-85117.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A m
CVE-2019-8461: High severity, CVSS 7.8 | Vulnix