Endpoint Security and HX
CVE-2023-3665: Code injection in Trellix Endpoint Security
A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trellix Endpoint Security (Linux) 10.7 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.