CVE-2025-0889

Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process...

Design/Logic Flaw

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch...

CVE-2018-10959

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch...

CVE-2018-10959

CVE-2018-10959 affects Avecto Defendpoint 4 (before 4.4 SR6) and 5 (before 5.1 SR1). The vulnerability is an Untrusted Search Path issue allowing elevation by modifying environment variables to launch the attacker’s process. Exploitation details beyond this are not provided in the documents. Reme...