https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-14963.htmlhttps://patchthecve.com/cve/CVE-2025-14963.htmlWed, 17 Jun 2026 08:36:51 +0000HIGH 7.8: A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver (BYOVD) was leveraged to gain access to the critical Windows process memory lsass.exe (Lochttps://patchthecve.com/cve/CVE-2025-3773.htmlhttps://patchthecve.com/cve/CVE-2025-3773.htmlWed, 17 Jun 2026 09:20:38 +0000MEDIUM 5.5: A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder.https://patchthecve.com/cve/CVE-2025-3771.htmlhttps://patchthecve.com/cve/CVE-2025-3771.htmlWed, 17 Jun 2026 09:20:38 +0000HIGH 7.1: A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a malicious entry to the registry under the Trellixhttps://patchthecve.com/cve/CVE-2025-3722.htmlhttps://patchthecve.com/cve/CVE-2025-3722.htmlWed, 17 Jun 2026 09:20:32 +0000MEDIUM 4.4: A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter, leading to creation of files anywhere on the filesystem and possibly overwriting existing files anhttps://patchthecve.com/cve/CVE-2024-11482.htmlhttps://patchthecve.com/cve/CVE-2024-11482.htmlWed, 17 Jun 2026 06:57:48 +0000CRITICAL 9.8: A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.https://patchthecve.com/cve/CVE-2024-11481.htmlhttps://patchthecve.com/cve/CVE-2024-11481.htmlWed, 17 Jun 2026 06:57:48 +0000HIGH 8.2: A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints.https://patchthecve.com/cve/CVE-2024-5957.htmlhttps://patchthecve.com/cve/CVE-2024-5957.htmlWed, 17 Jun 2026 08:16:59 +0000MEDIUM 6.3: This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.https://patchthecve.com/cve/CVE-2024-5956.htmlhttps://patchthecve.com/cve/CVE-2024-5956.htmlWed, 17 Jun 2026 08:16:59 +0000MEDIUM 6.5: This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostlyhttps://patchthecve.com/cve/CVE-2024-4176.htmlhttps://patchthecve.com/cve/CVE-2024-4176.htmlWed, 17 Jun 2026 08:01:16 +0000MEDIUM 4.1: An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to the Ehttps://patchthecve.com/cve/CVE-2023-6072.htmlhttps://patchthecve.com/cve/CVE-2023-6072.htmlWed, 17 Jun 2026 06:49:59 +0000MEDIUM 4.6: A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard.