CVE-2018-10722

HIGH 7.8CVE-2018-10722 · Published 04/05/2018 · updated 17/06/2026

In short

CVE-2018-10722 is a HIGH (CVSS 7.8) vulnerability affecting cylanceprotect (cylance).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 45.1% of all vulnerabilities.
Fix: update to 1470 or later.

Package	Affected versions	Patched versions
cylanceprotect cylance	`< 1470`	`1470`

Description

In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\Desktop\log folder, the CyUpdate process grants users Modify access to new files created in this folder, and a new file can be a symlink chain to a pathname of an arbitrary DLL that CyUpdate uses.

References

atredis.com/blog/cylance-privilege-escalation-vulnerability · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free