CVE-2019-3644

CVE-2019-9517 is a denial-of-service vulnerability in McAfee Web Gateway (MWG) scanners exposed in MWG versions before 7.8.2.13. The issue arises from unconstrained interal data buffering in HTTP/2, where an attacker can flood a connection with requests and exhaust resources on the server. Affect...

CVE-2019-3643

CVE-2019-3643 relates to McAfee Web Gateway (MWG) older than 7.8.2.13 and is described as vulnerable to CVE-2019-9511, potentially causing a denial of service. The Connected documents provide no additional MWG-specific technical details, remediation, or confirmed exploit information in this set. ...

CVE-2020-7289

The CVE-2020-7289 entry concerns McAfee Active Response (MAR) on Windows prior to version 2.4.3 Hotfix 1. The vulnerability is a local privilege-escalation impacting the MAR component, allowing a malicious script or program to execute functions beyond the local user’s granted access. Documents co...

CVE-2020-7291

The CVE-2020-7291 entry corresponds to a Privilege Escalation in McAfee Active Response (MAR) for Mac, prior to version 2.4.3 Hotfix 1. The connected CNVD/NVD entries confirm the root cause as an elevation of privileges where a malicious script or program could perform functions that the local ex...

CVE-2016-3984

CVE-2016-3984 affects McAfee VirusScan Console and multiple McAfee components (MAR, MA, DXL, DLPe, MDC, ENS, IPS, VSE) on Windows. Local administrators can bypass self-protection rules and disable the antivirus engine by modifying registry keys. Impact: partial to full antivirus disablement; CVSS...

CVE-2020-7290

CVE-2020-7290 affects McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1. The vulnerability enables a locally executing script/program to run functions that the user should not be allowed to access, constituting a privilege-escalation issue. Affected product/version is MAR on Linux be...

CVE-2020-7326

The CVE-2020-7326 issue affects McAfee Active Response (MAR) prior to version 2.4.4. A security check was improperly implemented, allowing local administrators to execute malicious code by stopping a core Windows service, leaving the McAfee core trust component in an inconsistent state and causin...