What is CVE-2019-3646?

CVE-2019-3646 is a medium-severity vulnerability in Mcafee Total_protection, classified under CWE-714. CVSS score: 6.9/10. Published 2019-09-13.

How severe is CVE-2019-3646?

Medium severity. CVSS v3 base score is 6.9 out of 10.

Vulnerability in Mcafee Total_protection

CVE-2019-3646

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by…

EPSS: 0.015 (70.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.9 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L.

Affected products

Mcafee Total_protection
Mcafee, Llc Mcafee Total Protection - Free Antivirus Trial — versions 16.0

Weakness classification (CWE)

CWE-714
CWE-426 — Untrusted Search Path

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2019-3646?: CVE-2019-3646 is a medium-severity vulnerability in Mcafee Total_protection, classified under CWE-714. CVSS score: 6.9/10. Published 2019-09-13.
How severe is CVE-2019-3646?: Medium severity. CVSS v3 base score is 6.9 out of 10.