CVE-2020-7314

Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer DXL Client for Mac shipped with McAfee Agent MA for Mac prior to MA 5.6.6 allows local users to run commands as root via incorrectly applied permissions on temporary files...

CVE-2020-7323: Improper Authentication

Authentication Protection Bypass vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running...

PT-2020-19553

Name of the Vulnerable Software and Affected Versions McAfee MVISION Endpoint versions prior to 20.9 Update Description The issue is related to an Improper Access Control vulnerability. It allows local users to bypass security mechanisms and deny access to the SYSTEM folder due to incorrectly...

PT-2020-19552

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 September 2020 Update Description The issue allows physical local users to bypass the Windows lock screen by triggering certain detection events while the computer screen is...

CVE-2020-7312

DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder...

CVE-2020-7319: Improper Link Resolution Before File Access

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...

PT-2020-19551

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 September 2020 Update Description The issue allows local users to gain access to sensitive information due to the incorrect logging of sensitive information in debug logs...

PT-2020-19554

Name of the Vulnerable Software and Affected Versions McAfee MVISION Endpoint versions prior to 20.9 Update Description A privilege escalation issue allows local users to access files they otherwise would not have access to by manipulating symbolic links. This manipulation redirects McAfee file...

CVE-2020-7315

DLL Injection Vulnerability in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL...

PT-2020-19550

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 September 2020 Update Description A Protection Mechanism Failure issue allows a local administrator to temporarily reduce the detection capability, enabling otherwise detected...

CVE-2020-7325: Improper Link Resolution Before File Access

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...

CVE-2020-7322: Insertion of Sensitive Information into Log File

Information Disclosure Vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs...

CVE-2020-7324

Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied permissions...

McAfee True Key Memory Sensitive Information Plaintext Storage Vulnerability

McAfee True Key is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition.Microsoft Windows is a set of operating systems for use on personal devices from Microsoft Corporation, USA. A securi...

CVE-2020-7325

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...

CVE-2020-7320

Protection Mechanism Failure vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services...

CVE-2020-7322

Information Disclosure Vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs...

CVE-2020-7323

Authentication Protection Bypass vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running...

CVE-2020-7299

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key TK prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific...

Information disclosure

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key TK prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific...