Trellix Agent
Monthly
Local users with regular (non-admin) access to a host running Trellix Agent 5.8.4 can decrypt the agent's database by exploiting a hardcoded cryptographic key in mfecryptc.dll. The flaw requires local interactive access and cannot be triggered remotely; impact is limited to information disclosure with no availability or integrity loss. No public exploit code has been identified at time of analysis, and CISA KEV does not list this vulnerability.
Local users with regular (non-admin) access to a host running Trellix Agent 5.8.4 can decrypt the agent's database by exploiting a hardcoded cryptographic key in mfecryptc.dll. The flaw requires local interactive access and cannot be triggered remotely; impact is limited to information disclosure with no availability or integrity loss. No public exploit code has been identified at time of analysis, and CISA KEV does not list this vulnerability.