Read the docs

McAfee

Records603All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical42CVSS 9.0–10.0
CVSS high223CVSS 7.0–8.9

Exploited now

McAfee records in CISA KEV
TI-2021-02242 Sudo Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2022-04-06TI-2021-06229 McAfee Total Protection (MTP) Improper Privilege Management Vulnerability Priority CRITICAL 95KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Epolicy Orchestrator 86 records HIGH Web Gateway 41 records CRITICAL Endpoint Security 37 records LOW Network Data Loss Prevention 31 records HIGH Virusscan Enterprise 29 records MEDIUM Advanced Threat Defense 26 records MEDIUM Data Loss Prevention Endpoint 26 records LOW Total Protection 26 records CRITICAL

Records

10 records in Mcafee Agent · all components

TI-2020-05918 CVE-2020-7314 · GHSA-jgjp-57q6-q7hv

Privilege Escalation vulnerability in McAfee DXL for Mac

Priority LOW 36

Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior to MA 5.6.6 allows local users to run commands as root via incorrectly a…

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00355 Published 2020-09-10 Fixed in 5.6.6 CWE-732
TI-2021-11835 CVE-2021-31841 · GHSA-3gcg-c4cr-6g36

DLL side loading vulnerability in MA for Windows

Priority LOW 35

A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location.

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00241 Published 2021-09-22 Fixed in 5.7.4 CWE-347
TI-2020-05917 CVE-2020-7312 · GHSA-9pmj-qm26-jq78

DLL Search Order Hijacking in MA for Windows

Priority LOW 34

DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00348 Published 2020-09-10 Fixed in 5.6.6 CWE-427
TI-2020-05916 CVE-2020-7311 · GHSA-fjmh-g39v-6932

Privilege Escalation vulnerability in MA for Windows

Priority LOW 34

Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2020-09-10 Fixed in 5.6.6 CWE-269
TI-2021-11834 CVE-2021-31840 · GHSA-8r98-33h6-f6hq

DLL preload vulnerability in McAfee Agent for Windows

Priority LOW 32

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00348 Published 2021-06-10 Fixed in 5.7.3 CWE-427
TI-2021-11830 CVE-2021-31836 · GHSA-xxjw-6qx2-crcm

Improper Privilege Management in MA for Windows

Priority LOW 31

Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00197 Published 2021-09-22 Fixed in 5.7.4 CWE-269
TI-2017-02991 CVE-2017-3896 · GHSA-f6r6-r347-gjw5

Improper input validation in Intel McAfee Agent

Priority LOW 31

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02474 Published 2017-02-13 No fix listed CWE-20
TI-2020-05919 CVE-2020-7315 · GHSA-43wv-9cr7-p3pg

DLL Injection vulnerability in MA for Windows

Priority LOW 30

DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00467 Published 2020-09-10 Fixed in 5.6.6 CWE-426
Open these records in search →