mcafee Vulnerability Advisory Catalog

Total 506 security vulnerabilities recorded for mcafee software and firmware.

← Back to All Vendors
Component: endpoint_security

Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of servic...

📅 2020-11-12
CVSS 7.8 Dossier →
Component: mvision_endpoint

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side D...

📅 2020-11-11
CVSS 7.2 Dossier →
Component: mvision_endpoint

External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resou...

📅 2020-11-11
CVSS 7.2 Dossier →
CVE-2020-7327 MEDIUM
Component: mvision_endpoint_detection_and_response

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators t...

📅 2020-10-15
CVSS 6.0 Dossier →
CVE-2020-7326 MEDIUM
Component: active_response

Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stop...

📅 2020-10-15
CVSS 6.0 Dossier →
Component: application_and_change_control

Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators t...

📅 2020-10-15
CVSS 7.7 Dossier →
CVE-2020-7318 MEDIUM
Component: epolicy_orchestrator

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script ...

📅 2020-10-14
CVSS 4.6 Dossier →
CVE-2020-7317 MEDIUM
Component: epolicy_orchestrator

Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script ...

📅 2020-10-14
CVSS 4.6 Dossier →
Component: total_protection

Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious...

📅 2020-10-14
CVSS 7.5 Dossier →
CVE-2020-7316 MEDIUM
Component: file_and_removable_media_protection

Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, w...

📅 2020-10-07
CVSS 6.6 Dossier →
CVE-2020-7268 MEDIUM
Component: email_gateway

Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files...

📅 2020-09-16
CVSS 4.3 Dossier →
CVE-2020-7297 MEDIUM
Component: web_gateway

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard d...

📅 2020-09-16
CVSS 5.7 Dossier →
CVE-2020-7296 MEDIUM
Component: web_gateway

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configurati...

📅 2020-09-15
CVSS 5.7 Dossier →
Component: web_gateway

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected...

📅 2020-09-15
CVSS 3.5 Dossier →
CVE-2020-7294 MEDIUM
Component: web_gateway

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected...

📅 2020-09-15
CVSS 4.6 Dossier →
CVE-2020-7293 CRITICAL
Component: web_gateway

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change ...

📅 2020-09-15
CVSS 9.0 Dossier →
CVE-2020-7315 MEDIUM
Component: mcafee_agent

DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a ma...

📅 2020-09-10
CVSS 6.0 Dossier →
Component: mcafee_agent

Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior to...

📅 2020-09-10
CVSS 8.2 Dossier →
Component: mcafee_agent

DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code...

📅 2020-09-10
CVSS 7.8 Dossier →
Component: mcafee_agent

Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during ...

📅 2020-09-10
CVSS 7.8 Dossier →
CVE-2020-7325 MEDIUM
Component: mvision_endpoint

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would n...

📅 2020-09-09
CVSS 5.5 Dossier →
CVE-2020-7324 MEDIUM
Component: mvision_endpoint

Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access...

📅 2020-09-09
CVSS 6.1 Dossier →
CVE-2020-7323 MEDIUM
Component: endpoint_security

Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical loc...

📅 2020-09-09
CVSS 6.9 Dossier →
CVE-2020-7322 MEDIUM
Component: endpoint_security

Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain ac...

📅 2020-09-09
CVSS 4.7 Dossier →
Page 5 of 22 (506 Total Records)