What’s Vulnerable › Vulnerabilities

CVE-2019-8458

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-20 · updated 2026-06-17
• Weakness: CWE-114

Description

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Affected products

• checkpoint Capsule Docs: before e81.00 — fixed in e81.00
• checkpoint Endpoint Security Clients: before e81.00 — fixed in e81.00
• checkpoint Remote Access Clients: before e81.00 — fixed in e81.00

How to fix

Upgrade to a fixed version: checkpoint Capsule Docs e81.00; checkpoint Endpoint Security Clients e81.00; checkpoint Remote Access Clients e81.00. Check the vendor advisory for mitigations.

References

• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153053
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153053

Get alerted when CVE-2019-8458 or the next vulnerability affects your stack