Ryuk, Exploring the Human Connection

ARCHIVED STORY Ryuk, Exploring the Human Connection By John Fokker · Febraury 19, 2019 In collaboration with Bill Siegel and Alex Holdtman from Coveware At the beginning of 2019, McAfee ATR published an article describing how the hasty attribution of Ryuk ransomware to North Korea was missing the...

The vulnerability of the McAfee Total Protection antivirus protection, related to errors in checking the loading path of dynamic libraries, allows a hacker to execute arbitrary code.

The vulnerability of the McAfee Total Protection antivirus protection lies in errors during the checking of the path where dynamic libraries are loaded. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the McAfee MVision Endpoint security solution, related to access control deficiencies, allows a perpetrator to remove the security software.

The vulnerability of the McAfee MVision Endpoint operating system security tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to remove the security tool...

McAfee True Key Microsoft Windows Client Local Information Disclosure Vulnerability

McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in the Microsoft Windows client in McAfee TK 3.1.9211.0 and earlier versions. A...

Design/Logic Flaw

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key TK 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware...

CVE-2019-3610

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key TK 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware...

CVE-2019-3610

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key TK 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware...

CVE-2019-3610

The CVE-2019-3610 entry applies to the McAfee True Key Windows client. Affected software: McAfee True Key (Windows client) v3.1.9211.0 and earlier. Issue: local information disclosure via specially crafted malware, enabling a local attacker to exfiltrate confidential data. CVSS details indicate L...

CVE-2019-3610 True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key TK 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware...

McAfee ePolicy Orchestrator Cross-Site Request Forgery Vulnerability

McAfee ePolicy Orchestrator is an extensible platform for centralized policy management and enforcement of security policies. A cross-site request forgery vulnerability exists in McAfee ePolicy Orchestrator. An unauthenticated user could exploit this vulnerability to perform unintended ePO...

CVE-2019-3604

CVE-2019-3604 is a Cross-Site Request Forgery vulnerability in McAfee ePO (legacy) Cloud. The connected documents describe that unauthenticated users could perform unintended ePO actions by leveraging an authenticated user’s session, via unspecified vectors. The exact vulnerable component/version...

CVE-2019-3604

Cross-Site Request Forgery CSRF vulnerability in McAfee ePO legacy Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in McAfee ePO legacy Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors...

McAfee Total Protection (MTP) Security Restriction Bypass Vulnerability

McAfee Total Protection is a suite of antivirus software from the American company McAfee McAfee. A security vulnerability exists in the Windows client in McAfee MTP versions prior to 16.0.R18. This vulnerability can be exploited by a local attacker with specially crafted malware to bypass the...

CVE-2019-3593 Exploitation of Privilege/Trust vulnerability

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

CVE-2019-3593

CVE-2019-3593 tracks a privilege/trust vulnerability in the Windows client of McAfee Total Protection (MTP) before version 16.0.R18 . The issue allows local attackers to bypass the product’s self‑protection, tamper with policies and product files, and uninstall McAfee software via specially craft...

CVE-2019-3593

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

Privilege escalation

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

CVE-2019-3593

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

McAfee MVision Endpoint Authentication Vulnerability

McAfee MVision Endpoint is a set of endpoint security protection software from the U.S. company McAfee McAfee. A security vulnerability exists in versions prior to McAfee MVision Endpoint 1811 Update 1 18.11.31.62. The vulnerability can be exploited by an attacker to uninstall MVision Endpoint...