CVE-2022-3859

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-30 · updated 2026-06-17
Weakness: CWE-427

Description

An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there.

Affected products

Trellix Agent: before 5.7.8 — fixed in 5.7.8

How to fix

Upgrade to a fixed version: Trellix Agent 5.7.8. Check the vendor advisory for mitigations.

References

https://kcm.trellix.com/corporate/index?page=content&id=SB10391
https://kcm.trellix.com/corporate/index?page=content&id=SB10391

Get alerted when CVE-2022-3859 or the next vulnerability affects your stack