Mcafee, LLC vulnerabilities

87 vulnerabilities

Known vulnerabilities in Mcafee, LLC products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 37 products.

Products

37
6.8CVE-2018-6674mcafee, llcvirusscan enterprise (vse)+1
EPSS score
0.18%
Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).9.8CVE-2018-6703mcafee, llcmcafee agent+1
EPSS score
3.23%
Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service.6.5CVE-2018-6687mcafee, llcmcafee getsusp (getsusp)+1
EPSS score
0.82%
Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via while scanning a specifically crafted file . GetSusp is a free standalone McAfee tool that runs on several versions of Microsoft Windows.4.8CVE-2021-23881mcafee llcendpoint security (ens) for windows+1
EPSS score
0.64%
A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator user triggers the policy.7.2CVE-2021-23879mcafee, llcendpoint product removal tool+1
EPSS score
0.34%
Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileges are required to place the files in the required location.4.9CVE-2021-23883mcafee llcendpoint security (ens) for windows+1
EPSS score
0.27%
A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to this update.7.3CVE-2021-23878mcafee llcendpoint security (ens) for windows+1
EPSS score
0.62%
Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To exploit this, the local user has to access the relevant memory location immediately after an ENS administrator has made a configuration change through the console on their machine6.7CVE-2021-23880mcafee llcendpoint security (ens) for windows+1
EPSS score
0.29%
Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.8.2CVE-2021-23882mcafee llcendpoint security (ens) for windows+1
EPSS score
0.29%
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade.7.8CVE-2020-7260mcafee, llcmcafee application and change control (macc)+1
EPSS score
0.41%
DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder.7.2CVE-2020-7328mcafee, llcmvision endpoint epo extension+1
EPSS score
2.17%
External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resource or trigger arbitrary code execution via improper input validation of an HTTP request, where the content for the attack has been loaded into ePO by an ePO administrator.4.7CVE-2020-7322mcafee, llcendpoint security for windows+1
EPSS score
0.25%
Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.8.4CVE-2020-7257mcafee, llcmcafee endpoint security (ens)+1
EPSS score
0.25%
Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links whilst an anti-virus scan was in progress. This is timing dependent.7.8CVE-2020-7259mcafee, llcmcafee endpoint security (ens)+1
EPSS score
0.25%
Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file7.3CVE-2020-7320mcafee, llcendpoint security for windows+1
EPSS score
0.26%
Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services.6.7CVE-2020-7276mcafee, llcmcafee endpoint security (ens)+1
EPSS score
0.28%
Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.6.9CVE-2020-7323mcafee, llcendpoint security for windows+1
EPSS score
0.33%
Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running with elevated privileges. This issue is timing dependent and requires physical access to the machine.5.5CVE-2020-7251mcafee, llcmcafee endpoint security (ens)+1
EPSS score
0.21%
Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.5.5CVE-2020-7252mcafee, llcdata exchange layer (dxl) broker+1
EPSS score
0.50%
Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.6.7CVE-2020-7273mcafee, llcmcafee endpoint security (ens)+1
EPSS score
0.25%
Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters.