CVE-2022-25294

Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Windows user to run arbitrary code with SYSTEM privileges. All versions prior to 7.12.1 are affected. Agents for MacOS and Linux and Cloud are unaffected. Proofpoint has released fixed software version 7.12.1. The fixed software versions are available through the customer support portal.

• https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2022-0001Vendor Advisory
• https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2022-0001Vendor Advisory

Published

Mar 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2528In affected versions of Octopus Deploy it is possible to upl…6.5
• CVE-2022-2529sflow decode package does not employ sufficient packet sanit…7.5
• CVE-2022-25290WatchGuard Firebox and XTM appliances allow an authenticated…6.5
• CVE-2022-25291An integer overflow in WatchGuard Firebox and XTM appliances…8.8
• CVE-2022-25292A wgagent stack-based buffer overflow in WatchGuard Firebox …8.8
• CVE-2022-25293A systemd stack-based buffer overflow in WatchGuard Firebox …8.8
• CVE-2022-25295This affects the package github.com/gophish/gophish before 0…5.4
• CVE-2022-25296The package bodymen from 0.0.0 are vulnerable to Prototype P…7.3
• CVE-2022-25297This affects the package drogonframework/drogon before 1.7.5…8.8
• CVE-2022-25298This affects the package sprinfall/webcc before 0.3.0. It is…7.5
• CVE-2022-25299This affects the package cesanta/mongoose before 7.6. The un…7.5
• CVE-2022-2530Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…