What the vulnerability does

01Description

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Key dates

02Disclosure timeline

February 8, 2023 CVE published
March 25, 2025 Record updated