CVE-2019-8461

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with write permissions to the user.

• CWE-114
• CWE-426

• https://safebreach.com/Post/Check-Point-Endpoint-Security-Initial-Client-for-Windows-Privilege-Escalation-to-SYSTEMExploit, Third Party Advisory
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160812Patch, Vendor Advisory
• https://safebreach.com/Post/Check-Point-Endpoint-Security-Initial-Client-for-Windows-Privilege-Escalation-to-SYSTEMExploit, Third Party Advisory
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160812Patch, Vendor Advisory

Published

Aug 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-8455A hard-link created from the log file of Check Point ZoneAla…7.1
• CVE-2019-8456Check Point IKEv2 IPsec VPN up to R80.30, in some less commo…5.9
• CVE-2019-8457SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to …9.8
• CVE-2019-8458Check Point Endpoint Security Client for Windows, with Anti-…4.4
• CVE-2019-8459Check Point Endpoint Security Client for Windows, with the V…
• CVE-2019-8460OpenBSD kernel version <= 6.5 can be forced to create long c…7.5
• CVE-2019-8462In a rare scenario, Check Point R80.30 Security Gateway befo…7.5
• CVE-2019-8463A denial of service vulnerability was reported in Check Poin…7.5
• CVE-2019-8502An API issue existed in the handling of dictation requests. …3.3
• CVE-2019-8503A logic issue was addressed with improved validation. This i…8.8
• CVE-2019-8504A memory initialization issue was addressed with improved me…5.5
• CVE-2019-8505A logic issue was addressed with improved validation. This i…6.1