CVE-2019-8458
CVE-2019-8458 is a medium-severity vulnerability in Checkpoint Endpoint Security Clients with a CVSS 3.x base score of 4.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-114.
Key facts
- Severity: Medium (CVSS 3.x base score 4.4)
- CVSS v2: 3.5
- EPSS exploit prediction: 1% (58th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-114
- Affected product: Checkpoint Endpoint Security Clients
- Published:
- Last modified:
Description
Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.
Frequently asked questions
- What is CVE-2019-8458?
- Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.
- How severe is CVE-2019-8458?
- CVE-2019-8458 has a CVSS 3.x base score of 4.4, rated medium severity. It is exploitable over network with high attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
- Is CVE-2019-8458 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (58th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2019-8458?
- CVE-2019-8458 primarily affects Checkpoint Endpoint Security Clients. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2019-8458?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2019-8458 published?
- CVE-2019-8458 was published on 2019-06-20 and last updated on 2026-06-17.
References
Affected products (3)
- cpe:2.3:a:checkpoint:endpoint_security_clients:*:*:*:*:*:windows:*:*
- cpe:2.3:a:checkpoint:remote_access_clients:*:*:*:*:*:windows:*:*
- cpe:2.3:a:checkpoint:capsule_docs:*:*:*:*:*:*:*:*
More vulnerabilities in Checkpoint Endpoint Security Clients
- CVE-2019-8459 — Critical (CVSS 9.8): Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without…
- CVE-2019-8463 — High (CVSS 7.5): A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that…
All CVEs affecting Checkpoint Endpoint Security Clients →
Other CWE-114 vulnerabilities
- CVE-2025-36250 — Critical (CVSS 10.0): IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow…
- CVE-2024-56346 — Critical (CVSS 10.0): IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to…
- CVE-2025-36251 — Critical (CVSS 9.6): IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to…
- CVE-2024-56347 — Critical (CVSS 9.6): IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary…
- CVE-2025-1950 — Critical (CVSS 9.3): IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute…
- CVE-2024-25021 — High (CVSS 8.4): IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to…