Vulnerability Database

310,710

Total vulnerabilities in the database

CVE-2022-23714

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

  • Published: Jul 6, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-23714
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
elastic / endpoint_security 7.13.0 7.17.4.x
elastic / endpoint_security 8.0.0 8.2.3.x