CVE-2022-46334: Proofpoint Enterprise Protection Local Privilege Escalation

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-21 · updated 2026-06-17
Weakness: CWE-269

Description

Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below.

Affected products

Proofpoint Enterprise Protection: through 8.19.0

References

https://www.proofpoint.com/security/security-advisories/pfpt-sa-2022-0004
https://www.proofpoint.com/security/security-advisories/pfpt-sa-2022-0004

Get alerted when CVE-2022-46334 or the next vulnerability affects your stack