CVE-2026-32996

The Veeam Agent for Microsoft Windows software is impacted by a Local Privilege Escalation vulnerability. Attackers with limited permissions can gain higher-level access on the local system. The vulnerability is confirmed to be exploited in the wild. While one source describes the issue as Remote...

CVE-2026-0872: Improper Certificate Validation

Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation. This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2...

Veeam Agent for Microsoft Windows 6.3.2.1302 Private Fix Deployment Information

Article Applicability This article documents the Veeam Agent for Microsoft Windows private fix deployment procedure for customers who have recently installed Veeam Backup & Replication 12.3.2.4165 Patch. That patch to Veeam Backup & Replication includes a private fix for Veeam Agent for Microsoft...

Veeam Patches CVE-2025-23121: Critical RCE Bug Rated 9.9 CVSS in Backup & Replication

Veeam has rolled out patches to contain a critical security flaw impacting its Backup & Replication software that could result in remote code execution under certain conditions. The security defect, tracked as CVE-2025-23121, carries a CVSS score of 9.9 out of a maximum of 10.0. "A vulnerability...

CVE-2025-20259: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the update process of Cisco ThousandEyes Endpoint Agent for Windows could allow an authenticated, local attacker to delete arbitrary files on an affected device. These vulnerabilities are due to improper access controls on files that are in the local file system. An...

CVE-2024-35177

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. The wazuh-agent for Windows is vulnerable to a Local Privilege Escalation vulnerability...

CVE-2024-45207: Untrusted Search Path

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently,...

CVE-2024-9191: Incorrect Default Permissions

The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to retrieve passwords associated with Desktop MFA passwordless logins. The vulnerability was discovered via routine...

PT-2024-5916

Name of the Vulnerable Software and Affected Versions Cisco Meraki Systems Manager SM Agent for Windows affected versions not specified Description A vulnerability in Cisco Meraki Systems Manager SM Agent for Windows could allow an authenticated, local attacker to execute arbitrary code with...

PT-2024-38897 · Unknown +1 · Opa Go Library +1

Name of the Vulnerable Software and Affected Versions: OPA for Windows versions prior to 0.68.0 Description: A SMB force-authentication vulnerability exists due to improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one ...

CVE-2024-6151: Improper Privilege Management

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS...

CVE-2024-24910: Incorrect Permission Assignment for Critical Resource

A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target...

CVE-2024-0259: Incorrect Default Permissions

Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to ga...

PT-2023-21589

Name of the Vulnerable Software and Affected Versions Qualys Cloud Agent for Windows versions prior to 4.5.3.1 Description An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform. Attackers may load a malicious copy of a Dependency Link Library DLL via a local atta...

CVE-2023-28142: Concurrent Execution using Shared Resource with Improper Synchronization

A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileges limited on the local machine during uninstallation of the Qualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on...

PT-2022-25483 · Trend Micro · Trend Micro Deep Security +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Deep Security version 20 Cloud One - Workload Security Agent for Windows affected versions not specified Description: An Out-of-bounds read issue could allow a local attacker to disclose sensitive information on affected...

CVE-2022-26503: Deserialization of Untrusted Data

Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to run arbitrary code with local system privileges...

PT-2022-1830

Name of the Vulnerable Software and Affected Versions Veeam Agent for Windows versions 2.0 through 5.x Description The issue is related to the deserialization of untrusted data, which can be exploited by sending specially crafted data through TCP-port 9395. This allows local users to run arbitrar...

PT-2022-2715

Name of the Vulnerable Software and Affected Versions Proofpoint Insider Threat Management Agent for Windows versions prior to 7.12.1 Description The issue is related to the use of a potentially dangerous function in the Proofpoint Insider Threat Management Agent for Windows, which could allow an...

CVE-2022-25294: Undefined Security Weakness

Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Windows user to run arbitrary code with SYSTEM privileges. All versions prior to 7.12.1 are affected. Agents for MacOS and Linux and Cloud are unaffected...