Read the docs
TI-2020-05919 Aliases CVE-2020-7315GHSA-43wv-9cr7-p3pg

DLL Injection vulnerability in MA for Windows

Priority LOW 30CWE-426Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-426.

Summary

DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL.

Why it matters now

EPSS 0.00467 40th percentileScored 2026-11-07
Fix Fixed MA for Windows (McAfee LLC): 5.6.6

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeMA for Windows5.6.x to before 5.6.65.6.6Patch availableCNA
  • MA for Windows VendorMcAfee Affected 5.6.x to before 5.6.6 Fixed in 5.6.6 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:mcafee_agent:*:*:*:*:*:windows:*:*before 5.6.6VulnerableMcAfee
  • cpe:2.3:a:mcafee:mcafee_agent:*:*:*:*:*:windows:*:* Versions before 5.6.6 Vulnerable ·McAfee

Remediation

  • Fix · CNA MA for Windows (McAfee LLC) Fixed in 5.6.6

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    McAfee MA for Windows 5.6.6

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-05917 DLL Search Order Hijacking in MA for WindowsPriority LOW 34
    • TI-2020-05916 Privilege Escalation vulnerability in MA for WindowsPriority LOW 34
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7315
  2. 2026-10-03 Alias added: GHSA-43wv-9cr7-p3pg

References

Other 1

  • TI-2020-05918 Privilege Escalation vulnerability in McAfee DXL for Mac CVSS 3.1HIGH 8.2
  • TI-2021-11835 DLL side loading vulnerability in MA for Windows CVSS 3.1HIGH 8.2
  • TI-2020-05917 DLL Search Order Hijacking in MA for Windows CVSS 3.1HIGH 7.8
  • TI-2020-05916 Privilege Escalation vulnerability in MA for Windows CVSS 3.1HIGH 7.8
  • TI-2021-11834 DLL preload vulnerability in McAfee Agent for Windows CVSS 3.1HIGH 7.3
  • TI-2021-11830 Improper Privilege Management in MA for Windows CVSS 3.1HIGH 7.1
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences