CVE-2019-3617 Privilege escalation in ToPS for Mac

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

CVE-2020-7280: Improper Privilege Management

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise VSE prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing...

CVE-2019-3585: Improper Privilege Management

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges...

CVE-2020-7279: Untrusted Search Path

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System Host IPS for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder...

CVE-2019-3613: Uncontrolled Search Path Element

DLL Search Order Hijacking vulnerability in McAfee Agent MA prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder...

CVE-2019-3617: Improper Privilege Management

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

PT-2020-19521

Name of the Vulnerable Software and Affected Versions McAfee Host Intrusion Prevention System Host IPS for Windows versions prior to 8.0.0 Patch 15 Update Description The issue allows attackers with local access to execute arbitrary code via execution from a compromised folder. This is due to a D...

PT-2020-10905

Name of the Vulnerable Software and Affected Versions McAfee Total Protection ToPS for Mac OS versions prior to 4.6 Description The issue allows local users to gain root privileges via incorrect protection of temporary files. This is a privilege escalation vulnerability. Recommendations For...

PT-2020-10904 · Mcafee · Mcafee Agent

Name of the Vulnerable Software and Affected Versions: McAfee Agent versions prior to 5.6.4 Description: The issue allows attackers with local access to execute arbitrary code via execution from a compromised folder. This is due to a DLL Search Order Hijacking vulnerability. Recommendations: For...

CVE-2019-3588: Improper Privilege Management

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked...

RagnarLocker Ransomware Threatens to Release Confidential Information | McAfee Blogs

ARCHIVED STORY RagnarLocker Ransomware Threatens to Release Confidential Information Alexandre Mundo · JUN 09, 2020 EXECUTIVE SUMMARY The RagnarLocker ransomware first appeared in the wild at the end of December 2019 as part of a campaign against compromised networks targeted by its operators. Th...

CVE-2020-7280

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise VSE prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing...

PT-2020-3140

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions 8.8 prior to Patch 14 Description The issue is related to a Privilege Escalation vulnerability in the McTray.exe file of the Microsoft Windows client in McAfee VirusScan Enterprise. This vulnerability may...

PT-2020-3139

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions 8.8 prior to Patch 14 Description The issue is related to a Privilege Escalation vulnerability in the McTray.exe file of McAfee VirusScan Enterprise. This vulnerability may allow local users to interact wit...

RagnarLocker Ransomware Threatens to Release Confidential Information | McAfee Blogs

ARCHIVED STORY RagnarLocker Ransomware Threatens to Release Confidential Information Alexandre Mundo · JUN 09, 2020 EXECUTIVE SUMMARY The RagnarLocker ransomware first appeared in the wild at the end of December 2019 as part of a campaign against compromised networks targeted by its operators. Th...

McAfee VirusScan Enterprise for Linux <= 2.0.3 Multiple vulnerabilities (SB10316)

The remote host has a version of McAfee VirusScan Enterprise for Linux VSEL installed that is prior or equal to 2.0.3. It is, therefore, affected by a privilege escalation vulnerability which allows a malicious attacker the ability to delete files they do not have access to. %NASLMINLEVEL 70300 C...

McAfee Endpoint Security for Windows 10.5.x / 10.6.x / 10.7.0.x Privilege Escalation (SB10316)

The version of the McAfee Endpoint Security ENS for Windows installed on the remote Windows host is 10.5.x , 10.6.x, or 10.7.0.x. It is, therefore, affected by a privilege escalation vulnerability which allows a malicious attacker the ability to delete files they do not have access to. Note that...

McAfee VirusScan Enterprise < 8.8 Patch 14 Hotfix 116778 Privilege Escalation Vulnerability (SB10316)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 14 Hotfix 116778. It is, therefore, affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid136668; scriptversion"1.4";...

McAfee Endpoint Security Privileged Access Vulnerability

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on....

McAfee Endpoint Security Privilege Mobilization Vulnerability (CNVD-2020-35075)

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on....