Read the docs
TI-2018-04916 Aliases CVE-2018-6674GHSA-j2w2-mjcv-7rfm

Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges

Priority LOW 29CWE-264Published · Updated

Key facts

Attack vector
Physical
Privileges required
High
User interaction
Required
Attack complexity
High
Impact type
Security bypass, Privilege escalation, Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-264, CWE-269 and CWE-311.

Summary

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).

Why it matters now

EPSS 0.00177 7th percentileScored 2026-11-07
Fix Fixed VirusScan Enterprise (VSE) (McAfee, LLC): 8.8 Patch 13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeVirusScan Enterprise (VSE)8.8 to before 8.8 Patch 138.8 Patch 13Patch availableCNA
  • VirusScan Enterprise (VSE) VendorMcAfee Affected 8.8 to before 8.8 Patch 13 Fixed in 8.8 Patch 13 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:virusscan_enterprise:8.8.0:*:*:*:*:*:*:*8.8.0VulnerableMcAfee
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:mcafee:virusscan_enterprise:8.8.0:*:*:*:*:*:*:* Versions 8.8.0 Vulnerable ·McAfee
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

  • Fix · CNA VirusScan Enterprise (VSE) (McAfee, LLC) Fixed in 8.8 Patch 13

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-6674
  2. 2026-10-03 Alias added: GHSA-j2w2-mjcv-7rfm

References

Other 1

  • TI-2016-06740 Improper authentication in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 7.5
  • TI-2016-06738 Code injection in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.0
  • TI-2016-06742 HTTP response splitting in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.1
  • TI-2016-06741 Improper authentication in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.1
  • TI-2009-04865 Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows… CVSS 2.0HIGH 9.3
  • TI-2007-02073 Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch… CVSS 2.0HIGH 7.9
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences