Dashboard / CVE-2022-4326

CVE-2022-4326

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 32/100
Published: 2022-12-16 Modified: 2026-11-09 First seen: 2026-11-09 Status: active

Attack Surface

Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: None
S: Unchanged
C: None
I: High
A: High

Description

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
trellix endpoint_security_agent < 35.31.22

References & Advisories (1)

Bug Bounty Relevance

32 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

6.0 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

EPSS — Exploitation Probability

0.23%
Raw Score 0.002300
Percentile 13.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00230
2026-11-12
0.00230
2026-11-10
0.00230
2026-11-09
0.00230

Intelligence Sources

nvd ref →

External Links