VSE Escalation of Privileges through Alert pop-up window
Priority LOW 34CWE-269Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-269.
Summary
Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges.
Why it matters now
EPSS 0.00283 20th percentileScored 2026-11-07
Fix Fixed McAfee VirusScan Enterprise (VSE) (McAfee, LLC): 8.8 Patch 14
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| McAfee | McAfee VirusScan Enterprise (VSE) | 8.8.x to before 8.8 Patch 14 | 8.8 Patch 14 | Patch available | CNA |
- McAfee VirusScan Enterprise (VSE) VendorMcAfee Affected 8.8.x to before 8.8 Patch 14 Fixed in 8.8 Patch 14 Patch available CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:* | 8.8 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch1:*:*:*:windows:*:* | 8.8 patch1 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch10:*:*:*:windows:*:* | 8.8 patch10 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch11:*:*:*:windows:*:* | 8.8 patch11 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch12:*:*:*:windows:*:* | 8.8 patch12 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch13:*:*:*:windows:*:* | 8.8 patch13 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch2:*:*:*:windows:*:* | 8.8 patch2 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch3:*:*:*:windows:*:* | 8.8 patch3 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch4:*:*:*:windows:*:* | 8.8 patch4 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch5:*:*:*:windows:*:* | 8.8 patch5 | Vulnerable | McAfee |
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:* Versions 8.8 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch1:*:*:*:windows:*:* Versions 8.8 patch1 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch10:*:*:*:windows:*:* Versions 8.8 patch10 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch11:*:*:*:windows:*:* Versions 8.8 patch11 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch12:*:*:*:windows:*:* Versions 8.8 patch12 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch13:*:*:*:windows:*:* Versions 8.8 patch13 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch2:*:*:*:windows:*:* Versions 8.8 patch2 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch3:*:*:*:windows:*:* Versions 8.8 patch3 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch4:*:*:*:windows:*:* Versions 8.8 patch4 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch5:*:*:*:windows:*:* Versions 8.8 patch5 Vulnerable ·McAfee
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch6:*:*:*:windows:*:* | 8.8 patch6 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch7:*:*:*:windows:*:* | 8.8 patch7 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch8:*:*:*:windows:*:* | 8.8 patch8 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch9:*:*:*:windows:*:* | 8.8 patch9 | Vulnerable | McAfee |
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch6:*:*:*:windows:*:* Versions 8.8 patch6 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch7:*:*:*:windows:*:* Versions 8.8 patch7 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch8:*:*:*:windows:*:* Versions 8.8 patch8 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch9:*:*:*:windows:*:* Versions 8.8 patch9 Vulnerable ·McAfee
Remediation
- Fix · CNA McAfee VirusScan Enterprise (VSE) (McAfee, LLC) Fixed in 8.8 Patch 14
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
McAfee VirusScan Enterprise (VSE) 8.8 Patch 14
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2019-02652 Using VSE to bypass Windows Credentials on Lock screenPriority LOW 30
Timeline
- 2026-10-02 Threatist record created from CVE-2019-3585
- 2026-10-03 Alias added: GHSA-rjpq-h7r3-66pw
References
More McAfee Virusscan Enterprise vulnerabilities
- TI-2016-06740 Improper authentication in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 7.5
- TI-2016-06738 Code injection in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.0
- TI-2016-06742 HTTP response splitting in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.1
- TI-2016-06741 Improper authentication in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.1
- TI-2009-04865 Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows… CVSS 2.0HIGH 9.3
- TI-2007-02073 Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch… CVSS 2.0HIGH 7.9
Sources
- CVE-2019-3585 · CVE Program
- CVE-2019-3585 · NVD
- FIRST EPSS
- GHSA-rjpq-h7r3-66pw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences