Aller au contenu
en Se connecter
6.2 Moyenne

CVE-2026-102413 Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name

Description

Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations (including Chinese, Japanese, and Korean locales) on Windows, an unhandled exception can occur during file-path handling. This causes the Elastic Endpoint process to crash and restart repeatedly, which can degrade or disable Elastic Defend's real-time malware prevention and behavioral detection capabilities on the affected host for as long as the condition persists.

Produits et versions touchés

Produit Versions touchées Corrigé en
Elastic Agent and Elastic Defend 9.5 9.5.0 → 9.5.4 Pas de correctif indiqué
Elastic Agent and Elastic Defend 9.4 9.4.0 → 9.4.7 Pas de correctif indiqué
Elastic Agent and Elastic Defend 9.3 9.3.0 → 9.3.8 Pas de correctif indiqué
Elastic Agent and Elastic Defend 9.2 9.2.7 → 9.2.8 Pas de correctif indiqué
Elastic Agent and Elastic Defend 8.19 8.19.13 → 8.19.21 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Elastic Agent and Elastic Defend

Les 2 CVE de Elastic Agent and Elastic Defend →
CVE-2023-46669 Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead… 6.2 Moyenne
Suivre cette CVE