mcafee Vulnerability Advisory Catalog

Total 506 security vulnerabilities recorded for mcafee software and firmware.

← Back to All Vendors
CVE-2020-7320 MEDIUM
Component: endpoint_security

Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administra...

📅 2020-09-09
CVSS 6.7 Dossier →
Component: endpoint_security

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access...

📅 2020-09-09
CVSS 8.8 Dossier →
CVE-2020-7299 MEDIUM
Component: true_key

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a loc...

📅 2020-09-04
CVSS 5.0 Dossier →
Component: application_and_change_control

Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web s...

📅 2020-08-26
CVSS 3.9 Dossier →
CVE-2020-7310 MEDIUM
Component: total_protection

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change file...

📅 2020-08-21
CVSS 6.9 Dossier →
CVE-2020-7307 MEDIUM
Component: data_loss_prevention

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the...

📅 2020-08-13
CVSS 5.2 Dossier →
CVE-2020-7306 MEDIUM
Component: data_loss_prevention

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the...

📅 2020-08-13
CVSS 5.2 Dossier →
CVE-2020-7305 MEDIUM
Component: data_loss_prevention

Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to creat...

📅 2020-08-13
CVSS 6.7 Dossier →
Component: data_loss_prevention

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to em...

📅 2020-08-13
CVSS 7.6 Dossier →
CVE-2020-7303 MEDIUM
Component: data_loss_prevention

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scri...

📅 2020-08-13
CVSS 4.1 Dossier →
CVE-2020-7302 MEDIUM
Component: data_loss_prevention

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to u...

📅 2020-08-13
CVSS 5.4 Dossier →
CVE-2020-7301 MEDIUM
Component: data_loss_prevention

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts...

📅 2020-08-12
CVSS 4.1 Dossier →
CVE-2020-7300 MEDIUM
Component: data_loss_prevention

Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to chang...

📅 2020-08-12
CVSS 4.6 Dossier →
Component: total_protection

Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real time scanning via a specially cra...

📅 2020-08-05
CVSS 7.5 Dossier →
CVE-2020-7292 MEDIUM
Component: web_gateway

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ...

📅 2020-07-15
CVSS 4.3 Dossier →
Component: network_security_management

Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the ...

📅 2020-07-03
CVSS 8.6 Dossier →
Component: total_protection

Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link mani...

📅 2020-07-03
CVSS 7.5 Dossier →
Component: total_protection

Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files the user would otherwise not ha...

📅 2020-07-03
CVSS 7.5 Dossier →
Component: total_protection

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not ...

📅 2020-07-03
CVSS 7.5 Dossier →
CVE-2020-7262 MEDIUM
Component: advanced_threat_defense

Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a careful...

📅 2020-06-22
CVSS 5.3 Dossier →
Component: virusscan_enterprise

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to ...

📅 2020-06-10
CVSS 7.8 Dossier →
CVE-2020-7279 MEDIUM
Component: host_intrusion_prevention

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 P...

📅 2020-06-10
CVSS 4.6 Dossier →
CVE-2019-3588 MEDIUM
Component: virusscan_enterprise

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unaut...

📅 2020-06-10
CVSS 6.3 Dossier →
Component: virusscan_enterprise

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local...

📅 2020-06-10
CVSS 7.0 Dossier →
Page 6 of 22 (506 Total Records)