PT-2020-19545

Name of the Vulnerable Software and Affected Versions McAfee Agent MA for Windows versions prior to 5.6.6 Description The issue allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder. This is due to a DLL Search Order Hijacking Vulnerability i...

CVE-2020-7315: Untrusted Search Path

DLL Injection Vulnerability in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL...

PT-2020-19546

Name of the Vulnerable Software and Affected Versions McAfee Data Exchange Layer DXL Client for Mac versions prior to 5.6.6 Description A privilege escalation issue exists due to incorrectly applied permissions on temporary files in the installer. This allows local users to execute commands as...

PT-2020-19547

Name of the Vulnerable Software and Affected Versions McAfee Agent for Windows versions prior to 5.6.6 Description The issue allows local users to execute arbitrary code via careful placement of a malicious DLL. This is a result of a DLL injection vulnerability. Recommendations For versions prior...

Vulnerabilities fixed in McAfee Endpoint Security

McAfee has fixed vulnerabilities in End Point Security. A local malicious party could exploit the vulnerabilities to gain access gain access to sensitive data, or by obtaining elevated permissions to stop the anti-virus process and thereby deploy undetected implement malware. McAfee has released...

PT-2020-19544

Name of the Vulnerable Software and Affected Versions McAfee Agent for Windows versions prior to 5.6.6 Description A privilege escalation issue exists in the installer of McAfee Agent for Windows, allowing local users to gain SYSTEM rights during installation by manipulating log files...

CVE-2020-7320

Protection Mechanism Failure vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services...

CVE-2020-7323

Authentication Protection Bypass vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running...

CVE-2020-7324

Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied permissions...

CVE-2020-7325

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...

CVE-2020-7319

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...

CVE-2020-7322

Information Disclosure Vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs...

CVE-2020-7322

Information Disclosure Vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs...

CVE-2020-7319

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...

CVE-2020-7325

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...

CVE-2020-7324

Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied permissions...

CVE-2020-7320

Protection Mechanism Failure vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services...

CVE-2020-7323

Authentication Protection Bypass vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running...

Information disclosure

Information Disclosure Vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs...

Improper access control

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...