Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-14963

Опубликовано: 24 фев. 2026
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver (BYOVD) was leveraged to gain access to the critical Windows process memory lsass.exe (Local Security Authority Subsystem Service). The fekern.sys is a driver file associated with the HX Agent (used in all existing HX Agent versions). The vulnerable driver installed in a product or a system running a fully functional HX Agent is, itself, not exploitable as the product’s tamper protection restricts the ability to communicate with the driver to only the Agent’s processes.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trellix:endpoint_security:*:*:*:*:*:*:*:*
Версия от 30.0.0 (включая) до 34.0.0 (включая)
cpe:2.3:a:trellix:endpoint_security:35.31.0-37:*:*:*:*:*:*:*
cpe:2.3:a:trellix:endpoint_security:36.30.0-17:*:*:*:*:*:*:*

EPSS

Процентиль: 1%
0.001
Низкий

7.8 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.8
github
4 месяца назад

A vulnerability identified in the Trellix HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver (BYOVD) was leveraged to gain access to the critical Windows process memory lsass.exe (Local Security Authority Subsystem Service). The fekern.sys; a driver file associated with Trellix HX Agent (used in all existing HX Agent versions).   The vulnerable driver installed in a product or a system running fully functional HX Agent is, itself, not exploitable as the product’s tamper protection restricts the ability to communicate with the driver to only the agent’s processes.

EPSS

Процентиль: 1%
0.001
Низкий

7.8 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo