← Database

CVE-2022-4326

MEDIUM CVSS: 5.5 Published: 2022-12-16 Modified: 2026-06-17

Description

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.

Affected Platforms

Microsoft WindowsTrellix Endpoint Security

Weakness Type

CWE-281, CWE-281

References