CVE-2025-66374

Description

References

• docs.cyberark.com/epm/latest/en/content/release%20notes/rn-whatsnew25-12.htm · Release Notes
• cyberark.com/ca26-01 · Permissions Required
• cyberark.com/product-security · Vendor Advisory

More vulnerabilities in endpoint privilege manager

• CVE-2026-2914HIGH 7.8CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk el…
• CVE-2021-44049HIGH 7.8CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan …
• CVE-2020-25738MEDIUM 5.5CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL i…
• CVE-2018-14894HIGH 7.8CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended…
• CVE-2019-9627HIGH 7.0A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker…