CVE-2022-23743

Check Point ZoneAlarm on Windows is affected by CVE-2022-23743. Versions prior to 15.8.200.19118 allow local privilege escalation during the upgrade process. In addition, weak permissions in the ProgramData\CheckPoint\ZoneAlarm\Data\Updates directory enable a local attacker to perform an arbitrar...

CVE-2022-41604

CVE-2022-41604 affects Check Point ZoneAlarm Extreme Security prior to 15.8.211.19229. Root cause: weak permissions on %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates and a self-protection driver bypass that allows creation of a junction directory, enabling an arbitrary file move as NT AUTHORITY\...

CVE-2020-6022

CVE-2020-6022 affects Check Point ZoneAlarm (Extreme Security) prior to version 15.8.139.18543. The root cause is an authorization issue that lets a local attacker delete arbitrary files while restoring files in Anti-Ransomware. Impact described in connected docs indicates potential local data lo...

CVE-2020-6023

CVE-2020-6023 affects Check Point ZoneAlarm (Anti-Ransomware) prior to version 15.8.139.18543, enabling a local attacker to escalate privileges during the restoration of files. The vulnerability is documented across multiple sources as a local privilege escalation risk in ZoneAlarm/Extreme Securi...