CVE-2019-3585

CVE-2019-3585 affects McAfee VirusScan Enterprise (VSE) 8.8 before Patch 14. The issue is a Privilege Escalation in the Microsoft Windows client (McTray.exe) where local attackers can interact with the On-Access Scan Messages – Threat Alert Window with elevated privileges by running McAfee Tray w...

CVE-2020-7279 DLL search order hijacking in Host IPS

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System Host IPS for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder...

CVE-2020-7279

CVE-2020-7279 affects McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update. The installer component is vulnerable to a DLL search order hijack, enabling a local attacker to execute arbitrary code via a compromised folder. Root cause: DLL search order hijac...

CVE-2019-3613

DLL Search Order Hijacking vulnerability in McAfee Agent MA prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder...

CVE-2019-3613

DLL Search Order Hijacking vulnerability in McAfee Agent MA prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder...

Spoofing

DLL Search Order Hijacking vulnerability in McAfee Agent MA prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder...

CVE-2019-3613 DLL search order hijacking in MA

DLL Search Order Hijacking vulnerability in McAfee Agent MA prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder...

CVE-2019-3613

The CVE-2019-3613 entry concerns McAfee Agent (MA) prior to 5.6.4. The vulnerability is a DLL Search Order Hijacking flaw that allows a local attacker to execute arbitrary code by running from a compromised folder. Affected versions are MA before 5.6.4; impact is local code execution with partial...

CVE-2019-3617

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

CVE-2019-3617

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

Privilege escalation

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

CVE-2019-3617 Privilege escalation in ToPS for Mac

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

CVE-2019-3617

CVE-2019-3617 affects McAfee Total Protection (ToPS) for macOS prior to 4.6. A local user can escalate privileges to root due to incorrect protection of temporary files. Vulnerable component is ToPS for Mac OS; root-level impact is stated. Exploitation details are not provided in the supplied doc...

PT-2020-10904 · Mcafee · Mcafee Agent

Name of the Vulnerable Software and Affected Versions: McAfee Agent versions prior to 5.6.4 Description: The issue allows attackers with local access to execute arbitrary code via execution from a compromised folder. This is due to a DLL Search Order Hijacking vulnerability. Recommendations: For...

RagnarLocker Ransomware Threatens to Release Confidential Information | McAfee Blogs

ARCHIVED STORY RagnarLocker Ransomware Threatens to Release Confidential Information Alexandre Mundo · JUN 09, 2020 EXECUTIVE SUMMARY The RagnarLocker ransomware first appeared in the wild at the end of December 2019 as part of a campaign against compromised networks targeted by its operators. Th...

RagnarLocker Ransomware Threatens to Release Confidential Information | McAfee Blogs

ARCHIVED STORY RagnarLocker Ransomware Threatens to Release Confidential Information Alexandre Mundo · JUN 09, 2020 EXECUTIVE SUMMARY The RagnarLocker ransomware first appeared in the wild at the end of December 2019 as part of a campaign against compromised networks targeted by its operators. Th...

McAfee VirusScan Enterprise for Linux <= 2.0.3 Multiple vulnerabilities (SB10316)

The remote host has a version of McAfee VirusScan Enterprise for Linux VSEL installed that is prior or equal to 2.0.3. It is, therefore, affected by a privilege escalation vulnerability which allows a malicious attacker the ability to delete files they do not have access to. %NASLMINLEVEL 70300 C...

McAfee VirusScan Enterprise < 8.8 Patch 14 Hotfix 116778 Privilege Escalation Vulnerability (SB10316)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 14 Hotfix 116778. It is, therefore, affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid136668; scriptversion"1.4";...

McAfee Endpoint Security for Windows 10.5.x / 10.6.x / 10.7.0.x Privilege Escalation (SB10316)

The version of the McAfee Endpoint Security ENS for Windows installed on the remote Windows host is 10.5.x , 10.6.x, or 10.7.0.x. It is, therefore, affected by a privilege escalation vulnerability which allows a malicious attacker the ability to delete files they do not have access to. Note that...

McAfee Endpoint Security Privilege Mobilization Vulnerability (CNVD-2020-35075)

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on....