CVE-2019-9627

CVE-2019-9627 describes a buffer overflow vulnerability in the CybKernelTracker.sys kernel driver of CyberArk Endpoint Privilege Manager versions prior to 10.7. An attacker with low privileges can exploit this by loading an image with an excessively long path, potentially leading to privilege escalation or system crashes. With a CVSS score of 7.0 (HIGH), this vulnerability has a local attack vector and high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.