CVE-2022-38777 Security Details

CVE ID

CVE-2022-38777

CWE

CWE-269

CVE Description

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Published

Feb 16, 2026

CVSS Score & Severity

7.8High

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.021%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

discuss.elastic.coPROJECT