4317 matches found
CVE-2019-3638
Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway MWG 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking the administrator to click on a carefully...
CVE-2019-3629
Application protection bypass vulnerability in McAfee Enterprise Security Manager ESM prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters...
CVE-2020-7282
Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious...
CVE-2020-7346
Privilege Escalation vulnerability in McAfee Data Loss Prevention DLP for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to load DLLs of the attacker's choosing. This requires the creation and removal of junctions by the attack...
CVE-2020-7283
Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine...
Lumma Stealer Found in Fake Crypto Tools and Game Mods on GitHub
McAfee Labs uncovers malicious GitHub repositories distributing Lumma Stealer malware disguised as game hacks and cracked software. Learn…...
The vulnerability of the McAfee Direct Stub Installer, a component of the anti-virus protection software McAfee Total Protection, allows a perpetrator to enhance their privileges and execute arbitrary code.
The vulnerability of the McAfee Total Protection antivirus protection tool’s installation script is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
15 SpyLoan Apps Found on Play Store Targeting Millions
SUMMARY Cybercriminals are exploiting SpyLoan, or predatory loan apps, to target unsuspecting users globally. McAfee cybersecurity researchers report…...
McAfee Total Protection Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of McAfee Total Protection. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the McAfee...
CVE-2024-49592
Trial installer for McAfee Total Protection legacy trial installer software 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable user" and the type of attack could be called "DLL-squatting." The issue only...
CVE-2024-49592
Trial installer for McAfee Total Protection legacy trial installer software 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable user" and the type of attack could be called "DLL-squatting." The issue only...
CVE-2024-49592
McAfee Total Protection 16.0.53 is affected by an Uncontrolled Search Path Element in the McAfee Direct Stub Installer that enables local privilege escalation via DLL-squatting. The vulnerability is limited to the installer’s execution and does not leave the product permanently vulnerable after i...
McAfee Total Protection 安全漏洞
McAfee Total Protection MTP is a suite of antivirus software from McAfee USA. A security vulnerability exists in McAfee Total Protection version 16.0.53, which stems from improper access control and results in local elevation of privilege...
CVE-2024-49592
Trial installer for McAfee Total Protection legacy trial installer software 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable user" and the type of attack could be called "DLL-squatting." The issue only...
Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines
Users searching for game cheats are being tricked into downloading a Lua-based malware that is capable of establishing persistence on infected systems and delivering additional payloads. "These attacks capitalize on the popularity of Lua gaming engine supplements within the student gamer...
OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script
Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell script. "This campaign heavily relies on social engineering tactics to deceive users into executing a PowerShell script, thereby compromising...
PT-2024-9205 · Mcafee · Mcafee Total Protection
Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions 16.0.53 Description: The issue is related to an Uncontrolled Search Path Element in the McAfee Direct Stub Installer, which can allow an attacker to elevate their privileges and execute arbitrary code. This ca...
Vulnerability of the McAfee Security protection software: An antivirus VPN for the Android operating system, which allows a perpetrator to trigger a service failure
The vulnerability of the McAfee Security protection software: The Android operating system-based antivirus and VPN solution has a flaw related to incorrect handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service interruptions by using incorrect...
Vulnerability of the McAfee Security software: The Android operating system’s antivirus VPN, which is vulnerable due to improper code generation, allowing attackers to perform spear-phishing attacks.
The vulnerability of the McAfee Security software: The Android operating system’s antivirus and VPN services are vulnerable due to improper code generation. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...