CVE-2024-24912

Published: May 1, 2024Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.

Affected (1)

Products: Checkpoint: Harmony Endpoint

1 product

Harmony Endpoint

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Checkpoint Harmony Endpoint	From e86.10 to e88.20

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://support.checkpoint.com/results/sk/sk182244

Source: cve@checkpoint.com

Vendor Advisory

https://support.checkpoint.com/results/sk/sk182244

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.