Read the docs

McAfee

Records603All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical42CVSS 9.0–10.0
CVSS high223CVSS 7.0–8.9

Exploited now

McAfee records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in True Key · all components

Priority LOW 36

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01137 Published 2018-12-06 No fix listed
Priority LOW 36

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01026 Published 2018-12-06 No fix listed
Priority LOW 36

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00982 Published 2018-12-06 No fix listed CWE-732
Priority LOW 36

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00937 Published 2018-09-24 Fixed in 5.1.165 CWE-426
Priority LOW 35

DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00797 Published 2018-04-02 Fixed in 4.20.110 CWE-426
Priority LOW 28

Cross Site Scripting Exposure in McAfee True Key (TK) 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00701 Published 2018-09-24 No fix listed CWE-79
Priority LOW 23

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another…

CVSS 3.1MEDIUM 5.0 Local High privileges User interaction EPSS 0.00359 Published 2020-09-04 Fixed in 6.2.110.8 CWE-522
Open these records in search →