Harmony Endpoint and VPN clients
CVE-2022-23742: Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics repo…
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Check Point Endpoint Security Client for Windows before E86.40 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.