CVE-2023-0977

—

CVSS 3.1

6.5 medium

EPSS

<1%p48

Published

Apr 3, 2023 (Apr 3, 2023)

Modified

Jun 17, 2026

Description

A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable.

Vendors: trellix
Products: agent
Weakness: CWE-120, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.