CVE-2026-10847
Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
- State
- Published
- Severity
- 7.8 High
- Published
- Jun 11, 2026
- Updated
- Jun 11, 2026
- Reserved
- Jun 4, 2026
Description
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | checkpoint |
Weaknesses
- CWE-427 Uncontrolled Search Path Element
Affected Products
| Product | Versions |
|---|---|
Identity Agentcheckpoint |
|
References
- Check Point Security Advisory for CVE-2026-10847vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.