Browse CVEs

HIGH 7.8 CVE-2020-7289 Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perfor… Active Response 2.4.3+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7290 Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform … Active Response 2.4.3+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7291 Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform fu… Active Response 2.4.3+ Fix from $1,9502020-05-08 HIGH 8.4 CVE-2020-7264 Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the… Endpoint Security 10.5.5+ Fix from $1,9502020-05-08 HIGH 8.4 CVE-2020-7265 Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherw… Endpoint Security 10.6.9+ Fix from $1,9502020-05-08 HIGH 8.4 CVE-2020-7266 Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete … Virusscan Enterprise 1.9.2 / 2.0.3+ Fix from $1,9502020-05-08 HIGH 7.8 CVE-2020-7250 Symbolic link manipulation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows authenticated loca… Endpoint Security Mitigation only Fix from $1,9502020-04-15 HIGH 7.8 CVE-2020-7259 Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to by… Endpoint Security Mitigation only Fix from $1,9502020-04-15 HIGH 7.8 CVE-2020-7274 Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users t… Endpoint Security Mitigation only Fix from $1,9502020-04-15 MEDIUM 6.7 CVE-2020-7276 Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administ… Endpoint Security Mitigation only Fix from $1,6002020-04-15 MEDIUM 5.5 CVE-2020-7261 Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allo… Endpoint Security Mitigation only Fix from $1,6002020-04-15 MEDIUM 5.5 CVE-2020-7273 Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windo… Endpoint Security Mitigation only Fix from $1,6002020-04-15 MEDIUM 5.3 CVE-2020-7275 Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 Apr… Endpoint Security Mitigation only Fix from $1,6002020-04-15 MEDIUM 5.3 CVE-2020-7277 Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to s… Endpoint Security Mitigation only Fix from $1,6002020-04-15 MEDIUM 6.3 CVE-2020-7257 Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the… Endpoint Security Mitigation only Fix from $1,6002020-04-15 MEDIUM 6.5 CVE-2020-7278 Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to… Endpoint Security Mitigation only Fix from $1,6002020-04-15 MEDIUM 6.7 CVE-2020-7263 Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrat… Endpoint Security Mitigation only Fix from $1,6002020-04-01 HIGH 7.8 CVE-2020-7260 DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary… Application And Change Control 8.3.0+ Fix from $1,9502020-03-26 HIGH 7.8 CVE-2020-7254 Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to exe… Advanced Threat Defense 4.8.2+ Fix from $1,9502020-03-12 MEDIUM 6.1 CVE-2019-3670 Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to e… Web Advisor after 8.0.34745 Fix from $1,6002020-02-24 MEDIUM 5.5 CVE-2020-7252 Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial o… Data Exchange Layer after 6.0.0 Fix from $1,6002020-02-17 MEDIUM 5.5 CVE-2020-7251 Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows loca… Endpoint Security 10.6.1+ Fix from $1,6002020-02-14 HIGH 7.8 CVE-2019-3667 DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbi… Techcheck after 3.0.0.17 Fix from $1,9502019-12-11 MEDIUM 6.5 CVE-2019-3666 API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the … Webadvisor 4.1.1.48+ Fix from $1,6002019-12-03 MEDIUM 6.5 CVE-2019-3665 Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the br… Webadvisor 4.1.1.48+ Fix from $1,6002019-12-03 HIGH 8.6 CVE-2019-3654 Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning … Client Proxy 3.0.0+ Fix from $1,9502019-11-22 HIGH 8.8 CVE-2019-3661 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remo… Advanced Threat Defense 4.8+ Fix from $1,9502019-11-14 HIGH 7.8 CVE-2019-3663 Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the roo… Advanced Threat Defense 4.8+ Fix from $1,9502019-11-14 MEDIUM 6.5 CVE-2019-3640 Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the … Data Loss Prevention after 11.4.0 Fix from $1,6002019-11-14 MEDIUM 6.5 CVE-2019-3662 Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to … Advanced Threat Defense 4.8+ Fix from $1,6002019-11-14