CVE-2021-23879

Unquoted service path vulnerability in McAfee Endpoint Product Removal EPR Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileg...

Design/Logic Flaw

Unquoted service path vulnerability in McAfee Endpoint Product Removal EPR Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileg...

CVE-2021-23879

The CVE-2021-23879 entry describes an unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool, before version 21.2. The flaw allows local administrators to execute arbitrary code with elevated privileges by placing files in an insecure path where the tool runs, due to th...

CVE-2021-23879 Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and ...

Unquoted service path vulnerability in McAfee Endpoint Product Removal EPR Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileg...

The vulnerability of the AMSI component of the McAfee Endpoint Security protection software allows a hacker to disable Endpoint Security.

The vulnerability of the AMSI component of the McAfee Endpoint Security protection software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disable Endpoint Security...

CVE-2021-26897

Windows DNS Server Remote Code Execution Vulnerability...

The vulnerability of the McAfee Endpoint Security software lies in its insecure management of privileges, allowing attackers to circumvent existing security restrictions.

The vulnerability of the McAfee Endpoint Security security software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions using a specially crafted file...

Mcafee McAfee Endpoint Product Removal 代码问题漏洞

Mcafee McAfee Endpoint Product Removal is an application from the American company McAfee Mcafee. It is used to uninstall McAfee products. McAfee Endpoint Product Removal has a security vulnerability that can be exploited by an attacker to bypass restrictions in order to escalate his privileges...

McAfee ATR Thinks in Graphs | McAfee Blogs

ARCHIVED STORY McAfee ATR Thinks in Graphs By Valentine Mairet · MAR 08, 2021 · 19 MIN READ 0. Introduction John Lambert, a distinguished researcher specializing in threat intelligence at Microsoft, once said these words that changed perspectives: “Defenders think in lists. Attackers think in...

McAfee ATR Thinks in Graphs | McAfee Blogs

ARCHIVED STORY McAfee ATR Thinks in Graphs By Valentine Mairet · MAR 08, 2021 · 19 MIN READ 0. Introduction John Lambert, a distinguished researcher specializing in threat intelligence at Microsoft, once said these words that changed perspectives: “Defenders think in lists. Attackers think in...

John McAfee Charged with Fraud in Cryptocurrency Scam

By Habiba Rashid John McAfee has been charged with fraud and money-laundering related to 2 cryptocurrency schemes, the US Justice Department said on Friday. This is a post from HackRead.com Read the original post: John McAfee Charged with Fraud in Cryptocurrency Scam...

McAfee Is Indicted for Altcoin Pump-and-Dumps and ICO Schemes

The 75-year-old antivirus entrepreneur faces up to 80 years in prison if convicted...

Babuk Ransomware

ARCHIVED STORY Babuk Ransomware By Alexandre Mundo · February 23, 2021 Executive Summary Babuk ransomware is a new ransomware threat discovered in 2021 that has impacted at least five big enterprises, with one already paying the criminals $85,000 after negotiations. As with other variants, this...

Babuk Ransomware

ARCHIVED STORY Babuk Ransomware By Alexandre Mundo · February 23, 2021 Executive Summary Babuk ransomware is a new ransomware threat discovered in 2021 that has impacted at least five big enterprises, with one already paying the criminals $85,000 after negotiations. As with other variants, this...

McAfee Endpoint Security Information Disclosure Vulnerability

McAfee Endpoint Security ENS is McAfee's antivirus product that provides comprehensive protection against network security threats. A plaintext storage of sensitive information vulnerability exists in McAfee Endpoint Security for Windows. An attacker could exploit this vulnerability to view ENS...

McAfee Endpoint Security Improper Access Control Vulnerability

McAfee Endpoint Security ENS is McAfee's antivirus product that provides comprehensive protection against network security threats. An improper access control vulnerability exists in McAfee Endpoint Security for Windows. An attacker could exploit the vulnerability to prevent the installation of...

McAfee Total Protection Mismanaged Privileges Vulnerability

McAfee Total Protection MTP is a one-stop security suite. A privilege mismanagement vulnerability exists in McAfee Total Protection versions prior to 16.0.30. The vulnerability can be exploited to cause a denial of service by an attacker to elevate privileges and make arbitrary file changes with...

McAfee Endpoint Security Improper Access Control Vulnerability (CNVD-2021-12621)

McAfee Endpoint Security ENS is McAfee's antivirus product that provides comprehensive protection against network security threats. An improper access control vulnerability exists in McAfee Endpoint Security for Windows. An attacker could exploit the vulnerability by running a specific command to...

McAfee Endpoint Security Null Pointer Dereference Vulnerability

McAfee Endpoint Security ENS is McAfee's antivirus product that provides comprehensive protection against network security threats. A null pointer dereference vulnerability exists in McAfee Endpoint Security for Windows. An attacker could cause Windows to crash by exploiting this vulnerability vi...

McAfee Total Protection Elevation of Privilege Vulnerability (CNVD-2021-12082)

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection prior to version 16.0.30. A local attacker can exploit this vulnerability to elevate privileges and perform arbitrary file deletions with SYSTEM user privileges, whi...