Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2022-01689 CVE-2022-1823 · GHSA-x2wv-xwwr-px62

McAfee MCPR privilege escalation

Priority LOW 34

Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack.

CVSS 3.1HIGH 7.9 Local Low privileges User interaction EPSS 0.0026 Published 2022-06-20 Fixed in 10.4.128 CWE-269
TI-2022-01690 CVE-2022-1824 · GHSA-946v-pv29-q7hv

McAfee MCPR privilege escalation

Priority LOW 36

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name.

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00357 Published 2022-06-20 Fixed in 10.4.128 CWE-427