CVE-2018-6756

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

CVE-2018-6755

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6756

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

Directory traversal

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

Privilege escalation

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

Authentication flaw

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

CVE-2018-6756

The CVE-2018-6756 entry concerns McAfee True Key (TK) Windows Client with affected version(s) up to 5.1.230.7, where an Authentication Abuse vulnerability enables local users to execute unauthorized commands via specially crafted malware. Connected documents corroborate local privilege/escalation...

CVE-2018-6755 True Key (TK) Windows Client - Weak Directory Permission Vulnerability

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6755

CVE-2018-6755 affects the McAfee True Key Windows client (TK) up to at least 5.1.230.7. The vulnerability is a Weak Directory Permission vulnerability in the Windows client that allows a local attacker to execute arbitrary code via specially crafted malware. Connected documents reference a local-...

CVE-2018-6757 True Key (TK) Windows Client - Privilege Escalation vulnerability

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6756 True Key (TK) Windows Client - Authentication Abuse vulnerability

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

CVE-2018-6757

McAfee True Key Windows client (TK) vulnerable to local privilege escalation on version 5.1.230.7 and earlier due to issues in the McAfee.TrueKey.Service implementation (notably SecureExecute). Public reports indicate multiple local-elevation vulnerability variants that can allow a non-privileged...

TimpDoor Android malware turning devices into hidden proxies

By Waqas Android users in North America are the current target of TimpDoor malware. The McAfee Mobile Research team has identified an active phishing campaign that traps users by sending an SMS to influence them on downloading and installing an Android malware app TimpDoor. It is a fake...

smbstorepartners.mcafee.com XSS vulnerability

Open Bug Bounty ID: OBB-688480 Description| Value ---|--- Affected Website:| smbstorepartners.mcafee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

New APT Could Signal Reemergence of Notorious Comment Crew

A recently observed APT campaign, dubbed Operation Oceansalt, could herald the return of the infamous China-linked hacking group known as Comment Crew or APT1. Attacks are cunning and are defined by their their deep targeting and use of an innovative multi-wave attack methodology. Operation...

McAfee Threat Intelligence Exchange Server SSH HOST Secret Key Generation Vulnerability

McAfee Threat Intelligence Exchange Server is a threat intelligence exchange service program. A SSH HOST secret key generation vulnerability exists in the McAfee Threat Intelligence Exchange Server server, which allows remote attackers to exploit the vulnerability to submit a special request for ...

McAfee Application and Change Control Security Bypass Vulnerability

McAfee Application and Change Control is a suite of program control software from the U.S.-based McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. A security bypass vulnerability exists in McAfee...

Conspiracy Theories around the "Presidential Alert"

Noted conspiracy theorist John McAfee tweeted: The "Presidential alerts": they are capable of accessing the E911 chip in your phones -- giving them full access to your location, microphone, camera and every function of your phone. This not a rant, this is from me, still one of the leading...

CVE-2018-6695

SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server TIE Server 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment...

Design/Logic Flaw

SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server TIE Server 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment...