CVE-2026-10847: Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS

Published Jun 11, 2026

Updated

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.

Affected Software

1 affected component

Check Point Identity Agent Full for Windows

Event History

Jun 11, 2026

CVE Published

via MITRE·01:52 PM

Data Sourced

via MITRE·01:52 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-10847?

The severity of CVE-2026-10847 is rated as high with a score of 7.8.

What kind of vulnerability is CVE-2026-10847?

CVE-2026-10847 is identified as a Local Privilege Escalation vulnerability.

How can I fix CVE-2026-10847?

To fix CVE-2026-10847, apply the latest security patches provided by Check Point for Identity Agent Full.

Who is affected by CVE-2026-10847?

CVE-2026-10847 affects authenticated local users of Check Point Identity Agent Full for Windows OS.

What can an attacker do by exploiting CVE-2026-10847?

An attacker exploiting CVE-2026-10847 may execute arbitrary code with SYSTEM privileges.