What’s Vulnerable › Vulnerabilities

CVE-2023-0977

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-04-03 · updated 2026-06-17
• Weakness: CWE-120

Description

A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable.

Affected products

• Trellix Agent: through 5.7.8

References

• https://kcm.trellix.com/corporate/index?page=content&id=SB10396
• https://kcm.trellix.com/corporate/index?page=content&id=SB10396

Get alerted when CVE-2023-0977 or the next vulnerability affects your stack