CVE-2026-10847

{
  "id": "CVE-2026-10847",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-11T14:16:26.060",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de escalada de privilegios local existe en Check Point Identity Agent Full para sistemas operativos Windows. Un usuario local autenticado podría ejecutar código arbitrario con privilegios de SYSTEM debido a un manejo inadecuado de la resolución de ejecutables durante el proceso de recolección de registros. La explotación exitosa podría permitir a un atacante obtener privilegios elevados en el endpoint Windows afectado."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "checkpoint",
          "product": "Identity Agent",
          "versions": [
            {
              "version": "Versions prior to 81.087.0000",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-11T14:19:16.357809Z",
          "id": "CVE-2026-10847",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.checkpoint.com/results/sk/sk185052",
      "source": "[email protected]"
    }
  ]
}