Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: McAfee Component: Mcafee Agent Clear all filters
TI-2021-11830 CVE-2021-31836 · GHSA-xxjw-6qx2-crcm

Improper Privilege Management in MA for Windows

Priority LOW 31

Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00197 Published 2021-09-22 Fixed in 5.7.4 CWE-269
TI-2021-11835 CVE-2021-31841 · GHSA-3gcg-c4cr-6g36

DLL side loading vulnerability in MA for Windows

Priority LOW 35

A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location.

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00241 Published 2021-09-22 Fixed in 5.7.4 CWE-347
TI-2021-11834 CVE-2021-31840 · GHSA-8r98-33h6-f6hq

DLL preload vulnerability in McAfee Agent for Windows

Priority LOW 32

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00348 Published 2021-06-10 Fixed in 5.7.3 CWE-427
TI-2020-05919 CVE-2020-7315 · GHSA-43wv-9cr7-p3pg

DLL Injection vulnerability in MA for Windows

Priority LOW 30

DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00467 Published 2020-09-10 Fixed in 5.6.6 CWE-426
TI-2020-05918 CVE-2020-7314 · GHSA-jgjp-57q6-q7hv

Privilege Escalation vulnerability in McAfee DXL for Mac

Priority LOW 36

Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior to MA 5.6.6 allows local users to run commands as root via incorrectly a…

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00355 Published 2020-09-10 Fixed in 5.6.6 CWE-732
TI-2020-05916 CVE-2020-7311 · GHSA-fjmh-g39v-6932

Privilege Escalation vulnerability in MA for Windows

Priority LOW 34

Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00279 Published 2020-09-10 Fixed in 5.6.6 CWE-269
TI-2020-05917 CVE-2020-7312 · GHSA-9pmj-qm26-jq78

DLL Search Order Hijacking in MA for Windows

Priority LOW 34

DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00348 Published 2020-09-10 Fixed in 5.6.6 CWE-427
TI-2017-02991 CVE-2017-3896 · GHSA-f6r6-r347-gjw5

Improper input validation in Intel McAfee Agent

Priority LOW 31

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02474 Published 2017-02-13 No fix listed CWE-20