CVE-2026-10847CWE-427

Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS

High · published June 11, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00124 · 1.9th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-06-11T13:52Z
EPSS history
Timeline
  • 11 JUN 13:52Z
    Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
    cvelistv5