CVE-2023-0977

6.5 mediumEPSS 0.6%

Medium (6.5) in trellix agent. EPSS 0.6% chance of exploitation in the next 30 days.

A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-120
Published: 2023-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trellix:agent

References

https://kcm.trellix.com/corporate/index?page=content&id=SB10396
https://kcm.trellix.com/corporate/index?page=content&id=SB10396

Check your stack JSON