Browse CVEs

CRITICAL 9.8 CVE-2026-16232 KEVEPSS 73% An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an applicati… Multi Domain Security Management No fix yet Fix from $2,3002026-07-22 CRITICAL 9.3 CVE-2026-50751 KEVEPSS 83% A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote att… Gaia Os Patch available Fix from $2,3002026-06-08 CRITICAL 9.8 CVE-2025-3831 Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties. Harmony Sase Mitigation only Fix from $2,3002025-08-12 MEDIUM 5.4 CVE-2024-52885 The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (autho… Mobile Access Mitigation only Fix from $1,6002025-08-06 MEDIUM 5.3 CVE-2025-2028 Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs Log Server Mitigation only Fix from $1,6002025-08-06 HIGH 7.2 CVE-2024-24915 Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and … Smartconsole Mitigation only Fix from $1,9502025-06-29 HIGH 7.8 CVE-2024-24916 Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileg… Smartconsole Mitigation only Fix from $1,9502025-06-19 MEDIUM 5.4 CVE-2024-52887 Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list. Mobile Access Mitigation only Fix from $1,6002025-04-27 MEDIUM 5.4 CVE-2024-52888 For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties. Mobile Access Mitigation only Fix from $1,6002025-04-27 HIGH 7.5 CVE-2024-24911 In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. Wh… Gaia Os Mitigation only Fix from $1,9502025-02-06 HIGH 7.8 CVE-2024-6233 Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate… Zonealarm Extreme Security Nextgen Mitigation only Fix from $1,9502024-11-22 HIGH 8.0 CVE-2024-24914 Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerabil… Gaia Os Mitigation only Fix from $1,9502024-11-07 HIGH 8.6 CVE-2024-24919 KEVEPSS 100% Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote … Quantum Spark Firmware Patch available Fix from $1,9502024-05-28 MEDIUM 6.7 CVE-2024-24912 A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit … Harmony Endpoint Mitigation only Fix from $1,6002024-05-01 HIGH 7.3 CVE-2024-24910 A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent f… Identity Agent 4.2.712+ Fix from $1,9502024-04-18 HIGH 7.8 CVE-2023-28134 Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first o… Endpoint Security No fix yet Fix from $1,9502023-11-12 HIGH 7.2 CVE-2023-28130EPSS 21% Local user may lead to privilege escalation using Gaia Portal hostnames page. Gaia Portal No fix yet Fix from $1,9502023-07-26 HIGH 7.8 CVE-2023-28133EPSS 6% Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file Endpoint Security Mitigation only Fix from $1,9502023-07-23 HIGH 7.5 CVE-2022-23746 The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for usernam… Ssl Network Extender Patch available Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-41604 Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for t… Zonealarm 15.8.211.19229+ Fix from $1,9502022-09-27 HIGH 7.5 CVE-2022-23745EPSS 16% A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could result in application crashing but… Capsule Workspace 8.2.2+ Fix from $1,9502022-07-18 HIGH 7.8 CVE-2022-23742 Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. … Endpoint Security Mitigation only Fix from $1,9502022-05-12 MEDIUM 6.7 CVE-2021-30361 The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that … Gaia Portal 2022-04-13+ Fix from $1,6002022-05-11 HIGH 7.8 CVE-2022-23743 Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permiss… Zonealarm 15.8.211.192119+ Fix from $1,9502022-05-11 HIGH 7.8 CVE-2021-30360 Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker c… Endpoint Security No fix yet Fix from $1,9502022-01-10 HIGH 7.8 CVE-2021-30359 The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because … Harmony Browse 90.08.7405+ Fix from $1,9502021-10-22 HIGH 7.2 CVE-2021-30358EPSS 27% Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locati… Mobile Access Portal Agent Patch available Fix from $1,9502021-10-19 MEDIUM 5.3 CVE-2021-30357EPSS 23% SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially … Ssl Network Extender Mitigation only Fix from $1,6002021-06-08 HIGH 8.1 CVE-2021-30356 A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite… Identity Agent Mitigation only Fix from $1,9502021-04-22 HIGH 7.8 CVE-2020-6024 Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vu… Smartconsole Mitigation only Fix from $1,9502021-01-20