CVE-2019-9627 Memory corruption in n/a

What is CVE-2019-9627?

CVE-2019-9627 is a high-severity memory corruption vulnerability in n/a, published on 8 Mar 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker (without Administrator privileges) to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path.

Weakness: CWE-787

Which versions are affected by CVE-2019-9627?

It affects 1 product.

Products include Cyberark Endpoint Privilege Manager.

How do I fix CVE-2019-9627?

No fix has been published for CVE-2019-9627 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2019-9627 being exploited?

There is no known exploitation of CVE-2019-9627 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-13052 Privilege escalation in n/a Critical 9.8
• CVE-2026-2914 Privilege escalation in Endpoint Privilege Manager Agent High 8.5
• CVE-2025-66374 Privilege escalation in n/a High 7.8
• CVE-2021-44049 Privilege escalation in n/a High 7.8
• CVE-2018-14894 Security feature bypass in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-w94w-74wp-6cw8.