Browse CVEs

HIGH 7.8 CVE-2022-0166 A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSS… Agent 5.7.5+ Fix from $1,9502022-01-19 MEDIUM 6.7 CVE-2022-0129 Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Libra… Techcheck 4.0.0.2+ Fix from $1,6002022-01-11 HIGH 7.8 CVE-2021-31833 Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in att… Application And Change Control 8.3.4+ Fix from $1,9502022-01-04 MEDIUM 6.1 CVE-2021-31850 A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-servic… Database Security 4.8.4+ Fix from $1,6002021-12-08 MEDIUM 6.1 CVE-2021-31851 A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary w… Policy Auditor 6.5.2+ Fix from $1,6002021-11-23 MEDIUM 6.1 CVE-2021-31852 A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary w… Policy Auditor 6.5.2+ Fix from $1,6002021-11-23 HIGH 7.8 CVE-2021-31853 DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code… Drive Encryption after 7.2.10 Fix from $1,9502021-11-10 HIGH 7.2 CVE-2021-31849 SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an admin… Data Loss Prevention Endpoint 11.6.400 / 11.7.100+ Fix from $1,9502021-11-01 MEDIUM 6.1 CVE-2021-31848 Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an… Data Loss Prevention Endpoint 11.6.400 / 11.7.100+ Fix from $1,6002021-11-01 HIGH 7.8 CVE-2021-23877 Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection (MTP) prior to 16.0.34_x may allow a local user to run a… Total Protection 16.0.34+ Fix from $1,9502021-10-26 MEDIUM 5.4 CVE-2021-31834 Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary … Epolicy Orchestrator 5.10.0+ Fix from $1,6002021-10-22 HIGH 7.8 CVE-2021-23893 Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to ga… Drive Encryption 7.3.0+ Fix from $1,9502021-10-01 HIGH 7.8 CVE-2021-31847 Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL… Agent 5.7.4+ Fix from $1,9502021-09-22 HIGH 7.3 CVE-2021-31841 A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsig… Mcafee Agent 5.7.4+ Fix from $1,9502021-09-22 HIGH 7.1 CVE-2021-31836 Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive i… Mcafee Agent 5.7.4+ Fix from $1,9502021-09-22 HIGH 7.8 CVE-2021-31843 Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to ac… Endpoint Security 10.7.0+ Fix from $1,9502021-09-17 HIGH 7.3 CVE-2021-31844 A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitr… Data Loss Prevention Endpoint 11.6.200+ Fix from $1,9502021-09-17 HIGH 7.3 CVE-2021-31845 A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Discover prior to 11.6.100 allows an attacker in the same network as the DLP Dis… Data Loss Prevention Discover 11.6.100 / 11.7.100+ Fix from $1,9502021-09-17 MEDIUM 5.5 CVE-2021-31842 XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user … Endpoint Security 10.7.0+ Fix from $1,6002021-09-17 CRITICAL 9.1 CVE-2021-31838 A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to exec… Mvision Edr 3.4.0+ Fix from $2,3002021-06-29 HIGH 7.3 CVE-2021-31840 A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticate… Mcafee Agent 5.7.3+ Fix from $1,9502021-06-10 HIGH 7.8 CVE-2021-31837 Memory corruption vulnerability in the driver file component in McAfee GetSusp prior to 4.0.0 could allow a program being investigated on the local m… Getsusp 4.0.0+ Fix from $1,9502021-06-09 MEDIUM 5.5 CVE-2021-31831 Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain a… Database Security 4.8.2+ Fix from $1,6002021-06-03 HIGH 8.0 CVE-2021-23895 Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a… Database Security 4.8.2+ Fix from $1,9502021-06-02 HIGH 8.8 CVE-2021-23894 Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create… Database Security 4.8.2+ Fix from $1,9502021-06-02 HIGH 7.8 CVE-2021-23872 Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated … Total Protection 16.0.32+ Fix from $1,9502021-05-12 HIGH 7.8 CVE-2021-23891 Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by impersonating… Total Protection 16.0.32+ Fix from $1,9502021-05-12 HIGH 7.0 CVE-2021-23892 By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/F… Endpoint Security For Linux Threat Prevention 10.7.5+ Fix from $1,9502021-05-12 HIGH 7.8 CVE-2021-23887 Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attack… Data Loss Prevention Endpoint 11.6.100.41+ Fix from $1,9502021-04-15 MEDIUM 6.5 CVE-2020-7308 Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Gl… Endpoint Security after 10.6.1 Fix from $1,6002021-04-15