CVE-2019-3653

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security ENS Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool...

CVE-2021-31843

Improper privileges management vulnerability in McAfee Endpoint Security ENS Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended locatio...

CVE-2019-3586

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security ENS 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI...

McAfee DLP Endpoint 代码问题漏洞

McAfee DLP Endpoint is a Data Loss Prevention DLP endpoint from McAfee, Inc. Protects against theft and accidental disclosure of confidential data. A code issue vulnerability exists in McAfee DLP Endpoint versions 11.9.100 and 11.6.600, which stems from an improper restriction of the XML External...

Vulnerabilities fixed in McAfee Endpoint Security and McAfee Data Loss Prevention

Vulnerabilities have been fixed in McAfee Endpoint Security and McAfee Data Loss Prevention. The vulnerabilities allow a malicious party to conduct attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root privileges Access to syste...

CVE-2021-31843

Improper privileges management vulnerability in McAfee Endpoint Security ENS Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended locatio...

Design/Logic Flaw

XML Entity Expansion injection vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing...

McAfee Endpoint Security 后置链接漏洞

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

PT-2021-19545 · Mcafee · Mcafee Endpoint Security

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS Windows versions prior to 10.7.0 September 2021 Update Description: The issue allows local users to access files they would otherwise not have access to by manipulating junction links to redirect McAfee folder...

CVE-2021-23879

Unquoted service path vulnerability in McAfee Endpoint Product Removal EPR Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileg...

McAfee Endpoint Security Elevation of Privilege Vulnerability (CNVD-2021-34723)

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on. An...

Mcafee McAfee Security 后置链接漏洞

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on. An...

Vulnerabilities fixed in McAfee Endpoint Security

Due to cleartext transfer of sensitive information between McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence GTI servers that use DNS use, a remote attacker can view ENS requests and responses from GTI via DNS. McAfee has released...

CVE-2020-7308

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence GTI servers using DNS allows a remote attacker to view the requests from ENS and responses from GTI over DNS. By gaining...

CVE-2021-23886

Denial of Service vulnerability in McAfee Data Loss Prevention DLP Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlphook driver reading inval...

Mcafee McAfee Endpoint Security 安全漏洞

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

PT-2021-12645 · Mcafee · Mcafee Endpoint Security (Ens) For Windows +1

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: The issue allows a remote attacker to view requests from ENS and responses from McAfee Global Threat Intelligence GTI servers over DNS. This i...

The vulnerability of the AMSI component of the McAfee Endpoint Security protection software allows a hacker to disable Endpoint Security.

The vulnerability of the AMSI component of the McAfee Endpoint Security protection software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disable Endpoint Security...

The vulnerability of the McAfee Endpoint Security software lies in its insecure management of privileges, allowing attackers to circumvent existing security restrictions.

The vulnerability of the McAfee Endpoint Security security software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions using a specially crafted file...

Mcafee McAfee Endpoint Product Removal 代码问题漏洞

Mcafee McAfee Endpoint Product Removal is an application from the American company McAfee Mcafee. It is used to uninstall McAfee products. McAfee Endpoint Product Removal has a security vulnerability that can be exploited by an attacker to bypass restrictions in order to escalate his privileges...