Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Trellix Component: Endpoint Security Clear all filters
TI-2025-13648 CVE-2025-14963 · GHSA-8fr6-83vj-w7xh

Improper input validation in Trellix Endpoint HX Agent

Priority LOW 28

A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges.

CVSS 4.0MEDIUM 6.2 Local High privileges No interaction EPSS 0.00118 Published 2026-02-24 No fix listed CWE-20
TI-2023-03422 CVE-2023-3665 · GHSA-55hp-w727-hgmp

Injection in Trellix Endpoint Security

Priority LOW 34

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00233 Published 2023-10-04 No fix listed CWE-74
TI-2022-03962 CVE-2022-4326 · GHSA-4x8j-29x3-246v

Trellix xAgent permission bypass vulnerability

Priority LOW 26

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agen…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.0023 Published 2022-12-16 Fixed in V35.31.22 CWE-281