Check Point Security Advisories & CVEs
52 advisories tracked · Check Point ([email protected] CNA) via NVD · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Check Point CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Check if your Check Point device is affected
Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in Check Point's recent advisories.
Official source
Check Point ([email protected] CNA) via NVD
Check Point is its own CVE Numbering Authority. VulniPulse ingests Check Point's CVEs from the NVD CNA feed ([email protected]), each linking to its support.checkpoint.com advisory. Covers Quantum Security Gateway / Spark, the Gaia OS, Quantum Maestro, Harmony Endpoint / Mobile, CloudGuard and the Security Management server — its Quantum VPN/gateways were mass-exploited (CVE-2024-24919), a top network-security target.
Latest Check Point advisories
Low [CVE-2022-23744] Check Point Endpoint before version E86.50 failed to protect against specific registry change
Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.
High [CVE-2020-0896 +1] Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory…
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.
High [CVE-2022-23743] Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process
Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permissions in the ProgramData\CheckPoint\ZoneAlarm\Data\Updates directory allow a local attacker the ability to execute an arbitrary file write, leading to execution of code as local system, in ZoneAlarm versions before v15.8.211.192119
Medium [CVE-2021-30361] The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to…
The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS.
High [CVE-2021-30360] Users have access to the directory where the installation repair occurs.
Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client privileges.
High [CVE-2021-30359] The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the…
The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation repair and place a specially crafted binary in the repair folder, which runs with the admin privileges.
High [CVE-2021-30358] Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
High [CVE-2021-30355] Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to…
Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root.
High [CVE-2021-30354] Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that
Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.
Medium [CVE-2021-30357] SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.
High [CVE-2021-30356] denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could
A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files.
High [CVE-2020-6024] Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81…
Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users.