McAfee, LLC
87 CVEs across 40 McAfee, LLC products. Browse McAfee, LLC vulnerabilities, severities, and proof-of-concept exploits.
McAfee, LLC products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23879 | Medium | 6.7 | 2021-03-15 | Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with hig… |
CVE-2021-23881 | Medium | 4.8 | 2021-02-10 | A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administr… |
CVE-2021-23883 | Medium | 4.0 | 2021-02-10 | A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cau… |
CVE-2021-23882 | High | 8.2 | 2021-02-10 | Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent… |
CVE-2021-23880 | Medium | 6.7 | 2021-02-10 | Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrato… |
CVE-2021-23878 | High | 7.3 | 2021-02-10 | Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a… |
CVE-2020-7343 | Medium | 5.5 | 2021-01-18 | Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a direct… |
CVE-2020-7337 | Medium | 6.5 | 2020-12-09 | Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to b… |
CVE-2020-7333 | Medium | 4.8 | 2020-11-12 | Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators t… |
CVE-2020-7332 | High | 7.0 | 2020-11-12 | Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacke… |
CVE-2020-7331 | High | 7.8 | 2020-11-12 | Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and mal… |
CVE-2020-7329 | High | 7.2 | 2020-11-11 | Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS reques… |
CVE-2020-7328 | High | 7.2 | 2020-11-11 | External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resource or tr… |
CVE-2020-7315 | Medium | 6.0 | 2020-09-10 | DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious D… |
CVE-2020-7314 | High | 8.2 | 2020-09-10 | Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior to MA 5.6.6… |
CVE-2020-7312 | High | 7.8 | 2020-09-10 | DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and esca… |
CVE-2020-7311 | High | 7.8 | 2020-09-10 | Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the insta… |
CVE-2020-7325 | Medium | 5.5 | 2020-09-09 | Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have a… |
CVE-2020-7324 | Medium | 6.1 | 2020-09-09 | Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the S… |
CVE-2020-7323 | Medium | 6.9 | 2020-09-09 | Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users… |
CVE-2020-7322 | Medium | 4.7 | 2020-09-09 | Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to s… |
CVE-2020-7320 | Medium | 6.7 | 2020-09-09 | Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to te… |
CVE-2020-7319 | High | 8.8 | 2020-09-09 | Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files wh… |
CVE-2020-7309 | Low | 3.9 | 2020-08-26 | Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or… |
CVE-2020-7262 | Medium | 5.3 | 2020-06-22 | Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafte… |
CVE-2020-7280 | High | 7.8 | 2020-06-10 | Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the… |
CVE-2020-7279 | Medium | 4.6 | 2020-06-10 | DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 U… |
CVE-2019-3588 | Medium | 6.3 | 2020-06-10 | Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized u… |
CVE-2019-3585 | High | 7.0 | 2020-06-10 | Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to… |
CVE-2019-3613 | Medium | 5.9 | 2020-06-10 | DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a… |
CVE-2019-3617 | High | 7.5 | 2020-06-10 | Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protectio… |
CVE-2020-7255 | Low | 3.9 | 2020-04-15 | Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allo… |
CVE-2020-7250 | High | 8.2 | 2020-04-15 | Symbolic link manipulation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows authenticated local user to… |
CVE-2020-7277 | Medium | 6.8 | 2020-04-15 | Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to stop certai… |
CVE-2020-7276 | Medium | 6.4 | 2020-04-15 | Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator user… |
CVE-2020-7275 | Medium | 4.8 | 2020-04-15 | Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Up… |
CVE-2020-7274 | Medium | 6.6 | 2020-04-15 | Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn un… |
CVE-2020-7273 | Medium | 6.7 | 2020-04-15 | Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior t… |
CVE-2020-7261 | Medium | 6.1 | 2020-04-15 | Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local u… |
CVE-2020-7259 | Medium | 6.6 | 2020-04-15 | Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local… |
CVE-2020-7257 | High | 8.4 | 2020-04-15 | Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion… |
CVE-2020-7278 | High | 7.4 | 2020-04-15 | Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Ap… |
CVE-2020-7263 | Medium | 6.5 | 2020-04-01 | Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alte… |
CVE-2020-7260 | High | 7.3 | 2020-03-26 | DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via… |
CVE-2020-7254 | High | 7.7 | 2020-03-12 | Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbit… |
CVE-2020-7253 | Medium | 5.7 | 2020-03-12 | Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protect… |
CVE-2019-3670 | High | 8.0 | 2020-02-24 | Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arb… |
CVE-2020-7252 | Medium | 4.2 | 2020-02-17 | Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service… |
CVE-2020-7251 | Medium | 5.0 | 2020-02-14 | Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to… |
CVE-2019-3667 | Medium | 6.6 | 2019-12-11 | DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code… |
CVE-2019-3666 | Medium | 6.5 | 2019-12-03 | API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to… |
CVE-2019-3665 | Medium | 6.5 | 2019-12-03 | Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to r… |
CVE-2019-3653 | Medium | 4.6 | 2019-10-09 | Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain acc… |
CVE-2019-3652 | Medium | 5.0 | 2019-10-09 | Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code… |
CVE-2019-3646 | Medium | 6.9 | 2019-09-13 | DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local us… |
CVE-2019-3644 | High | 7.5 | 2019-09-11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This af… |
CVE-2019-3643 | Medium | 5.3 | 2019-09-11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This af… |
CVE-2019-3634 | Medium | 5.5 | 2019-08-21 | Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue scree… |
CVE-2019-3633 | Medium | 5.5 | 2019-08-21 | Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue scree… |
CVE-2019-3639 | High | 7.1 | 2019-08-14 | Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attac… |
CVE-2019-3637 | Medium | 6.7 | 2019-08-14 | Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated pr… |
CVE-2019-3635 | Medium | 6.5 | 2019-08-14 | Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will t… |
CVE-2019-3621 | Medium | 6.8 | 2019-07-25 | Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the… |
CVE-2019-3622 | High | 8.2 | 2019-07-24 | Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirec… |
CVE-2019-3595 | Medium | 6.5 | 2019-07-24 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0… |
CVE-2019-3591 | Low | 3.9 | 2019-07-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in ePO extension in McAfee Data Loss Prevention (DLPe) for Windows 11.x pr… |
CVE-2019-3592 | High | 7.2 | 2019-07-18 | Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by mani… |
CVE-2019-3619 | Medium | 6.8 | 2019-07-03 | Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 allows remote unauthen… |
CVE-2019-3632 | High | 8.8 | 2019-06-27 | Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated pr… |
CVE-2019-3631 | High | 7.2 | 2019-06-27 | Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary… |
CVE-2019-3630 | High | 7.2 | 2019-06-27 | Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary… |
CVE-2019-3629 | Medium | 6.5 | 2019-06-27 | Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impe… |
CVE-2019-3628 | High | 8.8 | 2019-06-27 | Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via i… |
CVE-2019-3602 | Medium | 4.8 | 2019-05-15 | Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS i… |
CVE-2019-3586 | High | 7.5 | 2019-05-15 | Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circu… |
CVE-2019-3612 | Medium | 4.4 | 2019-04-10 | Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to v… |
CVE-2019-3606 | High | 7.7 | 2019-03-26 | Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9… |
CVE-2019-3597 | Medium | 6.5 | 2019-03-26 | Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to… |
CVE-2019-3599 | High | 7.5 | 2019-02-28 | Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access se… |
CVE-2019-3598 | Medium | 5.3 | 2019-02-28 | Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via specificall… |
CVE-2019-3582 | High | 8.6 | 2019-02-28 | Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privile… |
CVE-2018-6687 | Medium | 5.5 | 2019-02-21 | Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via whil… |
CVE-2019-3610 | Medium | 5.6 | 2019-02-13 | Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key (TK) 3.1.9211.0 and earlier allows local users to expose confidential data vi… |
CVE-2019-3604 | Medium | 4.8 | 2019-02-01 | Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authentica… |
CVE-2019-3593 | High | 7.5 | 2019-01-28 | Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.R18 allows local users to bypass produ… |
CVE-2018-6703 | Critical | 9.8 | 2018-12-11 | Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause… |
CVE-2018-6674 | Medium | 6.8 | 2018-05-25 | Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to sp… |