CVE-2015-8991

🗓️ 14 Mar 2017 22:00:00Reported by intelType

Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2015-8991	14 Mar 201722:00	–	cvelist
EUVD	EUVD-2015-8845	7 Oct 202500:30	–	euvd
NVD	CVE-2015-8991	14 Mar 201722:59	–	nvd
OpenVAS	McAfee Security Scan Plus File Execution Vulnerability - Windows	22 Mar 201700:00	–	openvas
Prion	Privilege escalation	14 Mar 201722:59	–	prion

NVD

Node

mcafee security_webadvisorMatch3.7.2

mcafee security_webadvisorMatch4.0.1

mcafee security_webadvisorMatch4.0.2

Node

mcafee cloud_avMatch-

mcafee security_scan_plusMatch-

[
  {
    "product": "McAfee Security Scan+ (MSS+)",
    "vendor": "Intel",
    "versions": [
      {
        "status": "affected",
        "version": "before 3.11.266.3"
      }
    ]
  }
]

Source	Link
service	www.service.mcafee.com/webcenter/portal/cp/home/articleview

13 May 2026 00:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.9

CVSS 37

EPSS0.00049

CWE-264