Vulnerability index

Browse CVEs

391 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Agent HIGH 7.8
CVE-2022-0166

A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSS…

Fix: 5.7.5+
Fix from $1,950 2022-01-19
Techcheck MEDIUM 6.7
CVE-2022-0129

Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Libra…

Fix: 4.0.0.2+
Fix from $1,600 2022-01-11
Application And Change Control HIGH 7.8
CVE-2021-31833

Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in att…

Fix: 8.3.4+
Fix from $1,950 2022-01-04
Database Security MEDIUM 6.1
CVE-2021-31850

A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-servic…

Fix: 4.8.4+
Fix from $1,600 2021-12-08
Policy Auditor MEDIUM 6.1
CVE-2021-31851

A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary w…

Fix: 6.5.2+
Fix from $1,600 2021-11-23
Policy Auditor MEDIUM 6.1
CVE-2021-31852

A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary w…

Fix: 6.5.2+
Fix from $1,600 2021-11-23
Drive Encryption HIGH 7.8
CVE-2021-31853

DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code…

Fix: after 7.2.10
Fix from $1,950 2021-11-10
Data Loss Prevention Endpoint HIGH 7.2
CVE-2021-31849

SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an admin…

Fix: 11.6.400 / 11.7.100+
Fix from $1,950 2021-11-01
Data Loss Prevention Endpoint MEDIUM 6.1
CVE-2021-31848

Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an…

Fix: 11.6.400 / 11.7.100+
Fix from $1,600 2021-11-01
Total Protection HIGH 7.8
CVE-2021-23877

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection (MTP) prior to 16.0.34_x may allow a local user to run a…

Fix: 16.0.34+
Fix from $1,950 2021-10-26
Epolicy Orchestrator MEDIUM 5.4
CVE-2021-31834

Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary …

Fix: 5.10.0+
Fix from $1,600 2021-10-22
Drive Encryption HIGH 7.8
CVE-2021-23893

Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to ga…

Fix: 7.3.0+
Fix from $1,950 2021-10-01
Agent HIGH 7.8
CVE-2021-31847

Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL…

Fix: 5.7.4+
Fix from $1,950 2021-09-22
Mcafee Agent HIGH 7.3
CVE-2021-31841

A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsig…

Fix: 5.7.4+
Fix from $1,950 2021-09-22
Mcafee Agent HIGH 7.1
CVE-2021-31836

Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive i…

Fix: 5.7.4+
Fix from $1,950 2021-09-22
Endpoint Security HIGH 7.8
CVE-2021-31843

Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to ac…

Fix: 10.7.0+
Fix from $1,950 2021-09-17
Data Loss Prevention Endpoint HIGH 7.3
CVE-2021-31844

A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitr…

Fix: 11.6.200+
Fix from $1,950 2021-09-17
Data Loss Prevention Discover HIGH 7.3
CVE-2021-31845

A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Discover prior to 11.6.100 allows an attacker in the same network as the DLP Dis…

Fix: 11.6.100 / 11.7.100+
Fix from $1,950 2021-09-17
Endpoint Security MEDIUM 5.5
CVE-2021-31842

XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user …

Fix: 10.7.0+
Fix from $1,600 2021-09-17
Mvision Edr CRITICAL 9.1
CVE-2021-31838

A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to exec…

Fix: 3.4.0+
Fix from $2,300 2021-06-29
Mcafee Agent HIGH 7.3
CVE-2021-31840

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticate…

Fix: 5.7.3+
Fix from $1,950 2021-06-10
Getsusp HIGH 7.8
CVE-2021-31837

Memory corruption vulnerability in the driver file component in McAfee GetSusp prior to 4.0.0 could allow a program being investigated on the local m…

Fix: 4.0.0+
Fix from $1,950 2021-06-09
Database Security MEDIUM 5.5
CVE-2021-31831

Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain a…

Fix: 4.8.2+
Fix from $1,600 2021-06-03
Database Security HIGH 8.0
CVE-2021-23895

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a…

Fix: 4.8.2+
Fix from $1,950 2021-06-02
Database Security HIGH 8.8
CVE-2021-23894

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create…

Fix: 4.8.2+
Fix from $1,950 2021-06-02
Total Protection HIGH 7.8
CVE-2021-23872

Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated …

Fix: 16.0.32+
Fix from $1,950 2021-05-12
Total Protection HIGH 7.8
CVE-2021-23891

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by impersonating…

Fix: 16.0.32+
Fix from $1,950 2021-05-12
Endpoint Security For Linux Threat Prevention HIGH 7.0
CVE-2021-23892

By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/F…

Fix: 10.7.5+
Fix from $1,950 2021-05-12
Data Loss Prevention Endpoint HIGH 7.8
CVE-2021-23887

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attack…

Fix: 11.6.100.41+
Fix from $1,950 2021-04-15
Endpoint Security MEDIUM 6.5
CVE-2020-7308

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Gl…

Fix: after 10.6.1
Fix from $1,600 2021-04-15