PT-2021-15583 · Mcafee · Mcafee Endpoint Security

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS versions prior to 10.7.0 February 2021 Update Description: A stored cross-site scripting issue allows an ENS ePO administrator to add a script to a policy event. This script will be executed through a browser bloc...

迈克菲 McAfee Endpoint Security 访问控制错误漏洞

McAfee Endpoint Security ENS is McAfee's antivirus product that provides comprehensive protection against network security threats. An improper access control vulnerability exists in McAfee Endpoint Security for Windows. An attacker could exploit the vulnerability by running a specific command to...

PT-2021-15580

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: A local user can view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions, su...

CVE-2021-23878

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

迈克菲 McAfee Total Protection 权限许可和访问控制问题漏洞

McAfee Total Protection MTP is a one-stop security suite. An arbitrary process execution vulnerability exists in McAfee Total Protection versions prior to 16.0.30. An attacker could exploit this vulnerability to bypass the MTP self-defense by elevating privileges and executing arbitrary code...

迈克菲 McAfee Total Protection 访问控制错误漏洞

McAfee Total Protection MTP is a one-stop security suite. A privilege mismanagement vulnerability exists in McAfee Total Protection versions prior to 16.0.30. The vulnerability can be exploited to cause a denial of service by an attacker to elevate privileges and make arbitrary file changes with...

CVE-2021-23883

A Null Pointer Dereference vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to th...

CVE-2021-23881

A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator...

PT-2021-15582 · Mcafee · Mcafee Endpoint Security (Ens) For Windows

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: The issue concerns improper access control in an attribute, allowing an authenticated local administrator user to uninstall the anti-malware...

CVE-2021-23880

Improper Access Control in attribute in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters...

CVE-2021-23882

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean...

McAfee Total Protection Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of McAfee Total Protection. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

McAfee McAfee Endpoint Security Cross-Site Scripting Vulnerability

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

PT-2021-15585 · Mcafee · Mcafee Endpoint Security (Ens) For Windows

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: A Null Pointer Dereference issue allows a local administrator to cause Windows to crash via a specific system call which is not handled...

CVE-2021-23881: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator...

CVE-2021-23874: Improper Privilege Management

Arbitrary Process Execution vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense...

CVE-2021-23878: Cleartext Storage of Sensitive Information

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

CVE-2021-23873: Improper Link Resolution Before File Access

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

CVE-2021-23880: Improper Privilege Management

Improper Access Control in attribute in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters...

CVE-2021-23883: NULL Pointer Dereference

A Null Pointer Dereference vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to th...