CVE-2024-24912: Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-01 · updated 2026-06-17
Weakness: CWE-732

Description

A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.

Affected products

checkpoint Harmony Endpoint Security Client for Windows: from e86.10 before e88.20 — fixed in e88.20

How to fix

Upgrade to a fixed version: checkpoint Harmony Endpoint Security Client for Windows e88.20. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-24912 or the next vulnerability affects your stack