Priority LOW 33
A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete.
CVSS 3.1HIGH 7.5· Local · Low privileges · No interaction · EPSS 0.00337 · Published 2022-03-10 · No fix listed CWE-367
Priority MEDIUM 58
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.30794 · Published 2021-08-12 · Fixed in 10.0.10240.19060, 10.0.14393.4651 +9
Priority MEDIUM 42
Untrusted search path vulnerability in the installer of Visual C++ Redistributable allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.05025 · Published 2018-06-26 · No fix listed CWE-426
Priority MEDIUM 46
Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.09887 · Published 2018-06-26 · No fix listed CWE-426
Priority LOW 38
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
CVSS 3.0HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.03016 · Published 2016-06-16 · No fix listed CWE-264
Priority LOW 19
The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console w…
CVSS 3.0LOW 3.0· Local · High privileges · No interaction · EPSS 0.02266 · Published 2016-05-05 · No fix listed CWE-264
Priority LOW 34
The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows…
CVSS 3.0MEDIUM 6.6· Local · Low privileges · User interaction · EPSS 0.02305 · Published 2016-01-12 · No fix listed CWE-189
Priority MEDIUM 56
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality, integrity, and availabi…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.17913 · Published 2015-10-21 · No fix listed
Priority MEDIUM 64
Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code v…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.2482 · Published 2015-10-21 · No fix listed CWE-22
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12208 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 55
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09304 · Published 2015-05-13 · No fix listed CWE-416
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 64
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.2547 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 57
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vul…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12208 · Published 2015-05-13 · No fix listed CWE-119
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Priority MEDIUM 55
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09917 · Published 2015-05-13 · No fix listed CWE-284
Load more