CVE-2021-23883

A Null Pointer Dereference vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to th...

CVE-2021-23880

Improper Access Control in attribute in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters...

CVE-2021-23882

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean...

CVE-2021-23883

A Null Pointer Dereference vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to th...

Improper access control

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean...

Improper access control

Improper Access Control in attribute in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters...

Null pointer dereference

A Null Pointer Dereference vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to th...

CVE-2021-23883 Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)

A Null Pointer Dereference vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to th...

CVE-2021-23883

This entry describes CVE-2021-23883: a Null Pointer Dereference in McAfee Endpoint Security (ENS) for Windows prior to the 10.7.0 February 2021 Update. The flaw allows a local administrator to crash Windows by invoking a specific system call that is not handled correctly, with impact described as...

CVE-2021-23882

CVE-2021-23882 affects McAfee Endpoint Security (ENS) for Windows prior to the 10.7.0 February 2021 Update. The issue is an Improper Access Control vulnerability that lets local administrators prevent installation of some ENS files by placing crafted files in the install location. It is described...

CVE-2021-23882 Improper Access Control in the ENS installer

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean...

CVE-2021-23880

CVE-2021-23880 affects McAfee Endpoint Security (ENS) for Windows pre-10.7.0 February 2021 Update. An attribute in ENS allows an authenticated local administrator to uninstall the anti‑malware engine by executing a specific command with correct parameters (improper access control). Public sources...

CVE-2021-23880 Improper Access Control in the ENS installer

Improper Access Control in attribute in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters...

CVE-2021-23878

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

CVE-2021-23878

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

Information disclosure

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

CVE-2021-23878 Clear text storage of sensitive Information in ENS

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

CVE-2021-23878

CVE-2021-23878 affects McAfee Endpoint Security for Windows prior to 10.7.0 (Feb 2021 Update). The issue is clear-text storage of sensitive information in memory, enabling a local user to view ENS settings and credentials by reading process memory shortly after an administrator applies a configur...

迈克菲 McAfee Endpoint Security 访问控制错误漏洞

McAfee Endpoint Security ENS is McAfee's antivirus product that provides comprehensive protection against network security threats. An improper access control vulnerability exists in McAfee Endpoint Security for Windows. An attacker could exploit the vulnerability to prevent the installation of...

CVE-2021-23880

Improper Access Control in attribute in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters...