Mcafee, LLC vulnerabilities, page 2
87 vulnerabilities
Known vulnerabilities in Mcafee, LLC products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 37 products.
CVE-2020-7280mcafee, llcmcafee virusscan enterprise (vse)+1
EPSS score0.40%
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.CVE-2020-7337mcafee, llcvirusscan enterprise (vse)+1EPSS score0.41%
Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of the Code Integrity checks.CVE-2020-7275mcafee, llcmcafee endpoint security (ens)+1EPSS score0.31%
Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file.CVE-2020-7325mcafee llcmvision endpoint+1EPSS score0.33%
Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.CVE-2020-7315mcafee llcma for windows+1EPSS score0.47%
DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL.CVE-2020-7312mcafee llcma for windows+1EPSS score0.35%
DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.CVE-2020-7263mcafee, llcendpoint security (ens) for window+1EPSS score0.17%
Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.CVE-2020-7319mcafee, llcendpoint security for windows+1EPSS score0.39%
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.CVE-2020-7262mcafee, llcmcafee advanced threat defense (atd)+1EPSS score0.74%
Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter.CVE-2020-7332mcafee, llcendpoint security for windows+1EPSS score0.59%
Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to incorrect security configuration.CVE-2020-7333mcafee, llcendpoint security for windows+1EPSS score0.52%
Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard.CVE-2020-7253mcafee, llcmcafee agent (ma)+1EPSS score0.24%
Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility.CVE-2020-7329mcafee, llcmvision endpoint epo extension+1EPSS score1.65%
Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.CVE-2020-7309mcafee, llcmcafee application and change control+1EPSS score0.37%
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.CVE-2020-7277mcafee, llcmcafee endpoint security (ens)+1EPSS score0.27%
Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS processes, reducing the protection offered.CVE-2020-7254mcafee, llcmcafee advanced threat defense (atd)+1EPSS score0.30%
Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.CVE-2020-7314mcafee llcmcafee dxl for mac shipped with ma+1EPSS score0.36%
Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior to MA 5.6.6 allows local users to run commands as root via incorrectly applied permissions on temporary files.CVE-2020-7324mcafee llcmvision endpoint+1EPSS score0.25%
Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied permissions.CVE-2020-7311mcafee llcma for windows+1EPSS score0.28%
Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.CVE-2020-7274mcafee, llcmcafee endpoint security (ens)+1EPSS score0.23%
Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).