CVE-2026-10847

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.

• CWE-427

• https://support.checkpoint.com/results/sk/sk185052

Published

Jun 11, 2026

Last Modified

Oct 26, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-108464Use after free in Software Protection Platform (SPP) allows …7
• CVE-2026-108465Use after free in Windows Update Delivery Optimization allow…7
• CVE-2026-108466Out-of-bounds read in Windows Kernel allows an unauthorized …5.3
• CVE-2026-108467Heap-based buffer overflow in Microsoft PostScript Printer D…8.8
• CVE-2026-108468Use after free in Windows Installer allows an authorized att…7
• CVE-2026-108469Improper neutralization of input during web page generation …6.8
• CVE-2026-108470Insufficiently protected credentials in Microsoft Authentica…6.5
• CVE-2026-108471Untrusted pointer dereference in Windows Virtualization-Base…8.8
• CVE-2026-108472A flaw was found in the xfs_admin utility in xfsprogs. The t…7.8
• CVE-2026-108473Multiple Kasa devices contain an improper authentication vul…8.7
• CVE-2026-108474In JetBrains Exposed before 1.5.1 sQL injection was possible…9.8
• CVE-2026-108475Missing Authorization vulnerability in VideoWhisper.com Broa…4.3