Search vulnerabilities

Expected end of text, found '–' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,942

CVE-2020-7293

Web Gateway (MWG) - Privilege Escalation vulnerability

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Web Gateway
CVE-2020-7292

Web Gateway (MWG) - Inappropriate Encoding for output context

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Web Gateway
CVE-2020-7291

Privilege Escalation vulnerability MAR for Mac

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple Mcafee
Products
Macos Active Response
CVE-2020-7290

Privilege Escalation vulnerability in MAR for Linux

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Linux Mcafee
Products
Linux Kernel Active Response
CVE-2020-7289

Privilege Escalation vulnerability in MAR for Windows

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee Microsoft
Products
Active Response Windows
CVE-2020-7288

Privilege Escalation vulnerability in EDR for Mac

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple Mcafee
Products
Macos Endpoint Detection And Response
CVE-2020-7287

Privilege Escalation vulnerability in EDR for Linux

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Linux Mcafee
Products
Linux Kernel Endpoint Detection And Response
CVE-2020-7286

Privilege Escalation vulnerability in EDR for Windows

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee Microsoft
Products
Endpoint Detection And Response Windows
CVE-2020-7285

Privilege Escalation vulnerability in MVISION Endpoint

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Mvision Endpoint
CVE-2020-7284

Network Security Management (NSM) - Exposure of Sensitive Information

Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Network Security Management
CVE-2020-7283

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Total Protection
CVE-2020-7282

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Total Protection
CVE-2020-7281

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Total Protection
CVE-2020-7280

Symbolic Link vulnerability during DAT update

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Virusscan Enterprise
CVE-2020-7279

DLL search order hijacking in Host IPS

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Host Intrusion Prevention
CVE-2020-7278

McAfee firewall rules not enforced correctly

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules not being handled correctly when updating to the February 2020 updates.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7277

McAfee processes not protected

Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS processes, reducing the protection offered.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7276

Unrestricted Policy Management using MfeUpgradeTool.exe

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7275

Unquoted service paths for some McAfee ENS files

Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7274

ENS elevated permissions vulnerability

Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security