Check Point Harmony (Endpoint/Mobile) Vulnerabilities & Security Advisories
5 advisories tracked · Check Point ([email protected] CNA) via NVD · 0 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Check Point advisory that VulniPulse classified as Harmony (Endpoint/Mobile), with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 4 high, 1 medium.
Android app · Google Play
Monitor Check Point CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Check Point ([email protected] CNA) via NVD
Check Point is its own CVE Numbering Authority. VulniPulse ingests Check Point's CVEs from the NVD CNA feed ([email protected]), each linking to its support.checkpoint.com advisory. Covers Quantum Security Gateway / Spark, the Gaia OS, Quantum Maestro, Harmony Endpoint / Mobile, CloudGuard and the Security Management server — its Quantum VPN/gateways were mass-exploited (CVE-2024-24919), a top network-security target.
Latest Check Point Harmony (Endpoint/Mobile) advisories
High [CVE-2025-9142] local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory
A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.
High [CVE-2025-3831] Harmony: Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.
Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.
Medium [CVE-2024-24912] local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10…
A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.
High [CVE-2023-28134] Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security
Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
High [CVE-2021-30359] The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the…
The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation repair and place a specially crafted binary in the repair folder, which runs with the admin privileges.