# cve.now: McAfee

The newest entries naming McAfee as an affected vendor (up to 200), of 275 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2022-1823](https://cve.now/CVE-2022-1823.md): McAfee MCPR privilege escalation (CVSS 7.9)
- [CVE-2022-1824](https://cve.now/CVE-2022-1824.md): McAfee MCPR privilege escalation (CVSS 7.9)
- [CVE-2022-1254](https://cve.now/CVE-2022-1254.md): SWG URL redirection vulnerability (CVSS 6.1)
- [CVE-2022-1257](https://cve.now/CVE-2022-1257.md): Improper Verification of Cryptographic Signature by McAfee Agent (CVSS 6.1)
- [CVE-2022-1258](https://cve.now/CVE-2022-1258.md): SQL injection vulnerability in McAfee Agent's ePO extension (CVSS 8.4)
- [CVE-2022-1256](https://cve.now/CVE-2022-1256.md): Improper Privilege Management in McAfee Agent for Windows (CVSS 7.8)
- [CVE-2022-0861](https://cve.now/CVE-2022-0861.md): ePO XML extended entity vulnerability (CVSS 3.5)
- [CVE-2022-0862](https://cve.now/CVE-2022-0862.md): ePO password change vulnerability (CVSS 3.1)
- [CVE-2022-0858](https://cve.now/CVE-2022-0858.md): Cross-site scripting vulnerability in ePO (CVSS 4.3)
- [CVE-2022-0859](https://cve.now/CVE-2022-0859.md): ePO database restoration vulnerability (CVSS 6.5)
- [CVE-2022-0857](https://cve.now/CVE-2022-0857.md): ePO Reflected Cross-site scripting vulnerability (CVSS 5.4)
- [CVE-2022-0842](https://cve.now/CVE-2022-0842.md): ePO blind SQL Injection vulnerability (CVSS 5.4)
- [CVE-2022-0280](https://cve.now/CVE-2022-0280.md): McAfee Total Protection (MTP) - File Deletion vulnerability (CVSS 7.5)
- [CVE-2022-0815](https://cve.now/CVE-2022-0815.md): McAfee WebAdvisor - Extension Fingerprinting vulnerability (CVSS 6.5)
- [CVE-2021-4088](https://cve.now/CVE-2021-4088.md): Blind SQL injection in DLP ePO extension (CVSS 8.4)
- [CVE-2022-0166](https://cve.now/CVE-2022-0166.md): Privilege escalation vulnerability in McAfee Agent (CVSS 7.8)
- [CVE-2021-31854](https://cve.now/CVE-2021-31854.md): Code injection vulnerability in McAfee Agent (CVSS 7.7)
- [CVE-2022-0129](https://cve.now/CVE-2022-0129.md): DLL Highjack vulnerability in McAfee TechCheck utility (CVSS 7.4)
- [CVE-2021-31833](https://cve.now/CVE-2021-31833.md): Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logg (CVSS 7.1)
- [CVE-2021-4038](https://cve.now/CVE-2021-4038.md): NSM vulnerable to XSS (CVSS 4.8)
- [CVE-2021-31850](https://cve.now/CVE-2021-31850.md): Denial of Service in Database Security on Windows (CVSS 6.1)
- [CVE-2021-31851](https://cve.now/CVE-2021-31851.md): Cross-Site Scripting vulnerability in Policy Auditor (CVSS 6.1)
- [CVE-2021-31852](https://cve.now/CVE-2021-31852.md): Cross-Site Scripting vulnerability in Policy Auditor (CVSS 6.1)
- [CVE-2021-31853](https://cve.now/CVE-2021-31853.md): MDE DLL Search Order Hijacking vulnerability (CVSS 7.8)
- [CVE-2021-31848](https://cve.now/CVE-2021-31848.md): Data Loss Prevention (DLP) ePO extension - Cross site scripting (XSS) (CVSS 8.4)
- [CVE-2021-31849](https://cve.now/CVE-2021-31849.md): Data Loss Prevention (DLP) ePO extension - SQL injection (CVSS 8.4)
- [CVE-2021-23877](https://cve.now/CVE-2021-23877.md): McAfee Total Protection (MTP) - Privilege Escalation vulnerability (CVSS 6.7)
- [CVE-2021-31834](https://cve.now/CVE-2021-31834.md): McAfee ePO Cross-Site Scripting vulnerability (no CVSS)
- [CVE-2021-31835](https://cve.now/CVE-2021-31835.md): McAfee ePO Cross-Site Scripting vulnerability (CVSS 4.8)
- [CVE-2021-23893](https://cve.now/CVE-2021-23893.md): Privilege Escalation vulnerability in McAfee Drive Encryption (MDE) (CVSS 8.8)
- [CVE-2021-31836](https://cve.now/CVE-2021-31836.md): Improper Privilege Management in MA for Windows (CVSS 5.6)
- [CVE-2021-31847](https://cve.now/CVE-2021-31847.md): Improper privilege management in repair process of MA for Windows (CVSS 8.2)
- [CVE-2021-31841](https://cve.now/CVE-2021-31841.md): DLL side loading vulnerability in MA for Windows (CVSS 8.2)
- [CVE-2021-31844](https://cve.now/CVE-2021-31844.md): Local Privilege Escalation in McAfee DLP Endpoint for Windows (CVSS 8.2)
- [CVE-2021-31845](https://cve.now/CVE-2021-31845.md): Remote Code Execution in McAfee DLP Discover (CVSS 8.4)
- [CVE-2021-31843](https://cve.now/CVE-2021-31843.md): Improper access control vulnerability in McAfee ENS for Windows (CVSS 7.3)
- [CVE-2021-31842](https://cve.now/CVE-2021-31842.md): XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a lo (CVSS 5.0)
- [CVE-2021-31838](https://cve.now/CVE-2021-31838.md): Command injection through environment variable in MVISION EDR (CVSS 8.4)
- [CVE-2021-31840](https://cve.now/CVE-2021-31840.md): DLL preload vulnerability in McAfee Agent for Windows (CVSS 7.3)
- [CVE-2021-31839](https://cve.now/CVE-2021-31839.md): Incorrect permissions on McAfee Agent for Windows event folder (CVSS 4.8)
- [CVE-2021-31832](https://cve.now/CVE-2021-31832.md): Cross site scripting vulnerability in DLP Endpoint for Windows (CVSS 5.2)
- [CVE-2021-31837](https://cve.now/CVE-2021-31837.md): Out of bounds write vulnerability in McAfee GetSusp (CVSS 8.8)
- [CVE-2021-31830](https://cve.now/CVE-2021-31830.md): Cross site Scripting (XSS) vulnerability in McAfee DBSec (CVSS 5.9)
- [CVE-2021-31831](https://cve.now/CVE-2021-31831.md): Incorrect access to deleted scripts vulnerability in McAfee DBSec (CVSS 4.9)
- [CVE-2021-23896](https://cve.now/CVE-2021-23896.md): Cleartext Transmission of Sensitive Information in McAfee DBSec (CVSS 3.2)
- [CVE-2021-23895](https://cve.now/CVE-2021-23895.md): Authorized deserialization of untrusted data in McAfee DBSec (CVSS 9.0)
- [CVE-2021-23894](https://cve.now/CVE-2021-23894.md): Unauthorized deserialization of untrusted data in McAfee DBSec (CVSS 9.6)
- [CVE-2021-23892](https://cve.now/CVE-2021-23892.md): By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall ( (CVSS 8.2)
- [CVE-2021-23872](https://cve.now/CVE-2021-23872.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.8)
- [CVE-2021-23891](https://cve.now/CVE-2021-23891.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.8)
- [CVE-2020-7270](https://cve.now/CVE-2020-7270.md): Sensitive Information Exposure in McAfee ATD (CVSS 4.9)
- [CVE-2020-7269](https://cve.now/CVE-2020-7269.md): Sensitive Information Exposure in McAfee ATD (CVSS 4.9)
- [CVE-2021-23887](https://cve.now/CVE-2021-23887.md): Privilege escalation in McAfee DLP Endpoint for Windows (CVSS 7.8)
- [CVE-2021-23886](https://cve.now/CVE-2021-23886.md): Local Denial of Service in McAfee DLP Endpoint for Windows (CVSS 5.5)
- [CVE-2020-7308](https://cve.now/CVE-2020-7308.md): Transmission of data in clear text by McAfee ENS (CVSS 4.8)
- [CVE-2021-23884](https://cve.now/CVE-2021-23884.md): Clear text exposure of password in McAfee CSR ePO extension (CVSS 4.3)
- [CVE-2021-23890](https://cve.now/CVE-2021-23890.md): McAfee ePO Information Leak vulnerability (CVSS 6.5)
- [CVE-2021-23888](https://cve.now/CVE-2021-23888.md): McAfee ePO unvalidated URL redirect vulnerability (CVSS 6.3)
- [CVE-2021-23889](https://cve.now/CVE-2021-23889.md): McAfee ePO Cross-site Scripting vulnerability (CVSS 3.5)
- [CVE-2020-7346](https://cve.now/CVE-2020-7346.md): Privilege escalation in McAfee DLP Endpoint for Windows (CVSS 7.8)
- [CVE-2021-23879](https://cve.now/CVE-2021-23879.md): Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and ... (CVSS 6.7)
- [CVE-2021-23885](https://cve.now/CVE-2021-23885.md): Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI (CVSS 9.0)
- [CVE-2021-23881](https://cve.now/CVE-2021-23881.md): Stored Cross Site Scripting in ENS (CVSS 4.8)
- [CVE-2021-23874](https://cve.now/CVE-2021-23874.md): McAfee Total Protection (MTP) privilege escalation vulnerability (CVSS 8.2, KEV)
- [CVE-2021-23876](https://cve.now/CVE-2021-23876.md): McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability (CVSS 7.8)
- [CVE-2021-23873](https://cve.now/CVE-2021-23873.md): McAfee Total Protection (MTP) privilege escalation vulnerability (CVSS 7.8)
- [CVE-2021-23883](https://cve.now/CVE-2021-23883.md): Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) (CVSS 4.0)
- [CVE-2021-23882](https://cve.now/CVE-2021-23882.md): Improper Access Control in the ENS installer (CVSS 8.2)
- [CVE-2021-23880](https://cve.now/CVE-2021-23880.md): Improper Access Control in the ENS installer (CVSS 6.7)
- [CVE-2021-23878](https://cve.now/CVE-2021-23878.md): Clear text storage of sensitive Information in ENS (CVSS 7.3)
- [CVE-2020-7343](https://cve.now/CVE-2020-7343.md): Improper Authorization vulnerability in MA (CVSS 5.5)
- [CVE-2020-7336](https://cve.now/CVE-2020-7336.md): Network Security Management (NSM) - Cross Site Request Forgery vulnerability (CVSS 6.6)
- [CVE-2020-7339](https://cve.now/CVE-2020-7339.md): Database Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm (CVSS 6.3)
- [CVE-2020-7337](https://cve.now/CVE-2020-7337.md): Incorrect Permission Assignment for Critical Resource (CVSS 6.5)
- [CVE-2020-7335](https://cve.now/CVE-2020-7335.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.5)
- [CVE-2020-7333](https://cve.now/CVE-2020-7333.md): Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS) (CVSS 4.8)
- [CVE-2020-7332](https://cve.now/CVE-2020-7332.md): Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS) (CVSS 7.0)
- [CVE-2020-7331](https://cve.now/CVE-2020-7331.md): Unquoted service executable path in McAfee Endpoint Security (ENS) (CVSS 7.8)
- [CVE-2020-7329](https://cve.now/CVE-2020-7329.md): Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension (CVSS 7.2)
- [CVE-2020-7328](https://cve.now/CVE-2020-7328.md): Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension (CVSS 7.2)
- [CVE-2020-7327](https://cve.now/CVE-2020-7327.md): McAfee MVEDR - Improperly implemented security check (CVSS 6.0)
- [CVE-2020-7326](https://cve.now/CVE-2020-7326.md): McAfee MAR - Improperly implemented security check (CVSS 6.0)
- [CVE-2020-7334](https://cve.now/CVE-2020-7334.md): Improper privilege assignment vulnerability in the installer component of MACC (CVSS 7.7)
- [CVE-2020-7317](https://cve.now/CVE-2020-7317.md): ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability (CVSS 4.6)
- [CVE-2020-7318](https://cve.now/CVE-2020-7318.md): ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability (CVSS 4.6)
- [CVE-2020-7330](https://cve.now/CVE-2020-7330.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial (CVSS 7.5)
- [CVE-2020-7316](https://cve.now/CVE-2020-7316.md): File and Removable Media Protection update fixes one vulnerability (CVSS 6.6)
- [CVE-2020-7268](https://cve.now/CVE-2020-7268.md): McAfee Email Gateway (MEG) - Path Traversal vulnerability (CVSS 4.3)
- [CVE-2020-7297](https://cve.now/CVE-2020-7297.md): Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 5.7)
- [CVE-2020-7296](https://cve.now/CVE-2020-7296.md): Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 5.7)
- [CVE-2020-7295](https://cve.now/CVE-2020-7295.md): Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 3.5)
- [CVE-2020-7294](https://cve.now/CVE-2020-7294.md): Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 4.6)
- [CVE-2020-7293](https://cve.now/CVE-2020-7293.md): Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 9.0)
- [CVE-2020-7315](https://cve.now/CVE-2020-7315.md): DLL Injection vulnerability in MA for Windows (CVSS 6.0)
- [CVE-2020-7314](https://cve.now/CVE-2020-7314.md): Privilege Escalation vulnerability in McAfee DXL for Mac (CVSS 8.2)
- [CVE-2020-7311](https://cve.now/CVE-2020-7311.md): Privilege Escalation vulnerability in MA for Windows (CVSS 7.8)
- [CVE-2020-7312](https://cve.now/CVE-2020-7312.md): DLL Search Order Hijacking in MA for Windows (CVSS 7.8)
- [CVE-2020-7325](https://cve.now/CVE-2020-7325.md): Privilege Escalation vulnerability in MVISION Endpoint (CVSS 5.5)
- [CVE-2020-7324](https://cve.now/CVE-2020-7324.md): Improper Access Control vulnerability in MVISION Endpoint (CVSS 6.1)
- [CVE-2020-7323](https://cve.now/CVE-2020-7323.md): Authentication Protection Bypass vulnerability in ENS for Windows (CVSS 6.9)
- [CVE-2020-7322](https://cve.now/CVE-2020-7322.md): Exposure of Sensitive Information in ENS for Windows (CVSS 4.7)
- [CVE-2020-7319](https://cve.now/CVE-2020-7319.md): Improper Access Control Vulnerability in ENS for Windows (CVSS 8.8)
- [CVE-2020-7320](https://cve.now/CVE-2020-7320.md): Protection Mechanism Failure in ENS for Windows (CVSS 6.7)
- [CVE-2020-7299](https://cve.now/CVE-2020-7299.md): Sensitive Data Exposure vulnerability in McAfee True Key Windows Client (CVSS 5.0)
- [CVE-2020-7309](https://cve.now/CVE-2020-7309.md): Cross Site Scripting vulnerability in ePO extension of MACC (CVSS 3.9)
- [CVE-2020-7310](https://cve.now/CVE-2020-7310.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial installer (CVSS 6.9)
- [CVE-2020-7307](https://cve.now/CVE-2020-7307.md): DLP for Mac - Unprotected Storage of Credentials (CVSS 5.2)
- [CVE-2020-7306](https://cve.now/CVE-2020-7306.md): DLP for Mac - Unprotected Storage of Credentials (CVSS 5.2)
- [CVE-2020-7305](https://cve.now/CVE-2020-7305.md): DLP ePO extension - Privilege escalation (CVSS 6.7)
- [CVE-2020-7304](https://cve.now/CVE-2020-7304.md): DLP ePO extension - Cross-site request forgery (CVSS 7.6)
- [CVE-2020-7303](https://cve.now/CVE-2020-7303.md): DLP ePO extension - Cross-site scripting (CVSS 4.1)
- [CVE-2020-7302](https://cve.now/CVE-2020-7302.md): DLP ePO extension - Unrestricted Upload of File with Dangerous Type (CVSS 5.4)
- [CVE-2020-7301](https://cve.now/CVE-2020-7301.md): DLP ePO extension - Cross site scripting (CVSS 4.1)
- [CVE-2020-7300](https://cve.now/CVE-2020-7300.md): DLP ePO extension - Improper Authorization (CVSS 4.6)
- [CVE-2020-7298](https://cve.now/CVE-2020-7298.md): Total Protection (MTP) - Unexpected behavior violation (CVSS 7.5)
- [CVE-2020-7292](https://cve.now/CVE-2020-7292.md): Web Gateway (MWG) - Inappropriate Encoding for output context (CVSS 4.3)
- [CVE-2020-7284](https://cve.now/CVE-2020-7284.md): Network Security Management (NSM) - Exposure of Sensitive Information (CVSS 8.6)
- [CVE-2020-7283](https://cve.now/CVE-2020-7283.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.5)
- [CVE-2020-7281](https://cve.now/CVE-2020-7281.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.5)
- [CVE-2020-7282](https://cve.now/CVE-2020-7282.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.5)
- [CVE-2020-7262](https://cve.now/CVE-2020-7262.md): Improper Access Control vulnerability in ATD (CVSS 5.3)
- [CVE-2020-7280](https://cve.now/CVE-2020-7280.md): Symbolic Link vulnerability during DAT update (CVSS 7.8)
- [CVE-2019-3588](https://cve.now/CVE-2019-3588.md): Using VSE to bypass Windows Credentials on Lock screen (CVSS 6.3)
- [CVE-2019-3585](https://cve.now/CVE-2019-3585.md): VSE Escalation of Privileges through Alert pop-up window (CVSS 7.0)
- [CVE-2020-7279](https://cve.now/CVE-2020-7279.md): DLL search order hijacking in Host IPS (CVSS 4.6)
- [CVE-2019-3613](https://cve.now/CVE-2019-3613.md): DLL search order hijacking in MA (CVSS 5.9)
- [CVE-2019-3617](https://cve.now/CVE-2019-3617.md): Privilege escalation in ToPS for Mac (CVSS 7.5)
- [CVE-2020-7290](https://cve.now/CVE-2020-7290.md): Privilege Escalation vulnerability in MAR for Linux (CVSS 7.8)
- [CVE-2020-7291](https://cve.now/CVE-2020-7291.md): Privilege Escalation vulnerability MAR for Mac (CVSS 7.8)
- [CVE-2020-7287](https://cve.now/CVE-2020-7287.md): Privilege Escalation vulnerability in EDR for Linux (CVSS 7.8)
- [CVE-2020-7288](https://cve.now/CVE-2020-7288.md): Privilege Escalation vulnerability in EDR for Mac (CVSS 7.8)
- [CVE-2020-7289](https://cve.now/CVE-2020-7289.md): Privilege Escalation vulnerability in MAR for Windows (CVSS 7.8)
- [CVE-2020-7285](https://cve.now/CVE-2020-7285.md): Privilege Escalation vulnerability in MVISION Endpoint (CVSS 7.8)
- [CVE-2020-7286](https://cve.now/CVE-2020-7286.md): Privilege Escalation vulnerability in EDR for Windows (CVSS 7.8)
- [CVE-2020-7267](https://cve.now/CVE-2020-7267.md): Privilege Escalation vulnerability through symbolic links in VSEL (CVSS 8.8)
- [CVE-2020-7266](https://cve.now/CVE-2020-7266.md): Privilege Escalation vulnerability through symbolic links in VSE for Windows (CVSS 8.8)
- [CVE-2020-7265](https://cve.now/CVE-2020-7265.md): Privilege Escalation vulnerability through symbolic links in ENSM (CVSS 8.8)
- [CVE-2020-7264](https://cve.now/CVE-2020-7264.md): Privilege Escalation vulnerability through symbolic links in ENS for Windows (CVSS 8.8)
- [CVE-2020-7255](https://cve.now/CVE-2020-7255.md): Privilege Escalation vulnerability in ENS (CVSS 3.9)
- [CVE-2020-7250](https://cve.now/CVE-2020-7250.md): ENS symbolic link log file manipulation vulnerability (CVSS 8.2)
- [CVE-2020-7257](https://cve.now/CVE-2020-7257.md): Privilege Escalation vulnerability through Symbolic links in ENS (CVSS 8.4)
- [CVE-2020-7259](https://cve.now/CVE-2020-7259.md): Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules (CVSS 6.6)
- [CVE-2020-7261](https://cve.now/CVE-2020-7261.md): Buffer overwrite in ENS allowed to bypass AMSI protection (CVSS 6.1)
- [CVE-2020-7273](https://cve.now/CVE-2020-7273.md): Autorun registry bypass (CVSS 6.7)
- [CVE-2020-7275](https://cve.now/CVE-2020-7275.md): Unquoted service paths for some McAfee ENS files (CVSS 4.8)
- [CVE-2020-7274](https://cve.now/CVE-2020-7274.md): ENS elevated permissions vulnerability (CVSS 6.6)
- [CVE-2020-7277](https://cve.now/CVE-2020-7277.md): McAfee processes not protected (CVSS 6.8)
- [CVE-2020-7276](https://cve.now/CVE-2020-7276.md): Unrestricted Policy Management using MfeUpgradeTool.exe (CVSS 6.4)
- [CVE-2020-7278](https://cve.now/CVE-2020-7278.md): McAfee firewall rules not enforced correctly (CVSS 7.4)
- [CVE-2020-7263](https://cve.now/CVE-2020-7263.md): ENS configuration can be edited by attacker with local administrator permissions (CVSS 6.5)
- [CVE-2020-7260](https://cve.now/CVE-2020-7260.md): MACC installer DLL side loading (CVSS 7.3)
- [CVE-2020-7256](https://cve.now/CVE-2020-7256.md): Network Security Management (NSM) - Cross site scripting vulnerability (CVSS 4.8)
- [CVE-2020-7258](https://cve.now/CVE-2020-7258.md): Network Security Management (NSM) - Cross site scripting vulnerability (CVSS 4.8)
- [CVE-2020-7254](https://cve.now/CVE-2020-7254.md): Privilege escalation in Advanced Threat Defense (CVSS 7.7)
- [CVE-2020-7253](https://cve.now/CVE-2020-7253.md): Improper access control vulnerability in McAfee Agent (CVSS 5.7)
- [CVE-2019-3670](https://cve.now/CVE-2019-3670.md): Remote Code Execution vulnerability (CVSS 8.0)
- [CVE-2020-7252](https://cve.now/CVE-2020-7252.md): Unquoted service executable path (CVSS 4.2)
- [CVE-2020-7251](https://cve.now/CVE-2020-7251.md): ESConfig Tool able to edit configuration for newer version (CVSS 5.0)
- [CVE-2019-3667](https://cve.now/CVE-2019-3667.md): DLL Search Order Hijacking (CVSS 6.6)
- [CVE-2019-3665](https://cve.now/CVE-2019-3665.md): Code Injection vulnerability (CVSS 6.5)
- [CVE-2019-3666](https://cve.now/CVE-2019-3666.md): API Abuse Vulnerability (CVSS 6.5)
- [CVE-2019-3654](https://cve.now/CVE-2019-3654.md): Client Proxy (MCP) - Authentication Bypass vulnerability (CVSS 5.3)
- [CVE-2019-3640](https://cve.now/CVE-2019-3640.md): Data Loss Prevention - Unprotected Transport of Credentials (CVSS 4.8)
- [CVE-2019-3663](https://cve.now/CVE-2019-3663.md): Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability (CVSS 9.8)
- [CVE-2019-3662](https://cve.now/CVE-2019-3662.md): Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerability (CVSS 6.5)
- [CVE-2019-3661](https://cve.now/CVE-2019-3661.md): Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVSS 8.1)
- [CVE-2019-3660](https://cve.now/CVE-2019-3660.md): Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests (CVSS 8.4)
- [CVE-2019-3650](https://cve.now/CVE-2019-3650.md): Advanced Threat Defense (ATD) - Information Disclosure vulnerability (CVSS 5.3)
- [CVE-2019-3651](https://cve.now/CVE-2019-3651.md): Advanced Threat Defense (ATD) - Information Disclosure vulnerability (CVSS 8.8)
- [CVE-2019-3649](https://cve.now/CVE-2019-3649.md): Advanced Threat Defense (ATD) - Information Disclosure vulnerability (CVSS 5.3)
- [CVE-2019-3641](https://cve.now/CVE-2019-3641.md): Exploitation of Authorization in TIE Server (CVSS 4.5)
- [CVE-2019-3648](https://cve.now/CVE-2019-3648.md): Implicit loading of DLLs (CVSS 6.1)
- [CVE-2019-3653](https://cve.now/CVE-2019-3653.md): ESConfig Tool access not controlled (CVSS 4.6)
- [CVE-2019-3652](https://cve.now/CVE-2019-3652.md): ENS code injection in EPSetup.exe (CVSS 5.0)
- [CVE-2019-3646](https://cve.now/CVE-2019-3646.md): McAfee Total Protection - Free Antivirus Trial: DLL Search Order Hijacking vulnerability (CVSS 6.9)
- [CVE-2019-3638](https://cve.now/CVE-2019-3638.md): Web Gateway (MWG) - Reflected Cross Site Scripting vulnerability (CVSS 8.1)
- [CVE-2019-3644](https://cve.now/CVE-2019-3644.md): MWG scanners updated to address CVE-2019-9517 (CVSS 7.5)
- [CVE-2019-3643](https://cve.now/CVE-2019-3643.md): MWG scanners updated to address CVE-2019-9511 (CVSS 5.3)
- [CVE-2019-3634](https://cve.now/CVE-2019-3634.md): Buffer overflow in DLP Endpoint for Windows (CVSS 4.4)
- [CVE-2019-3633](https://cve.now/CVE-2019-3633.md): Buffer overflow in DLP Endpoint for Windows (CVSS 4.4)
- [CVE-2019-3637](https://cve.now/CVE-2019-3637.md): Privilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.209 (CVSS 4.1)
- [CVE-2019-3639](https://cve.now/CVE-2019-3639.md): MWG UI: Cross-Frame Scripting vulnerability (CVSS 7.1)
- [CVE-2019-3635](https://cve.now/CVE-2019-3635.md): MWG Proxy: Cross-Frame Scripting vulnerability (CVSS 4.3)
- [CVE-2019-3621](https://cve.now/CVE-2019-3621.md): DLP Endpoint Windows lock screen bypass with physical access (CVSS 6.8)
- [CVE-2019-3622](https://cve.now/CVE-2019-3622.md): DLP Endpoint log file redirection to arbitrary locations (CVSS 7.5)
- [CVE-2019-3591](https://cve.now/CVE-2019-3591.md): DLP Endpoint ePO extension vulnerable to XSS (CVSS 3.9)
- [CVE-2019-3595](https://cve.now/CVE-2019-3595.md): DLP Endpoint ePO extension not sanitizing CSV exports (CVSS 2.0)
- [CVE-2019-3592](https://cve.now/CVE-2019-3592.md): MA for Windows update addresses weak directory permissions (CVSS 7.2)
- [CVE-2019-3619](https://cve.now/CVE-2019-3619.md): Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 all (CVSS 6.8)
- [CVE-2019-3632](https://cve.now/CVE-2019-3632.md): Directory Traversal vulnerability could lead to elevated privileges (CVSS 8.5)
- [CVE-2019-3631](https://cve.now/CVE-2019-3631.md): Command Injection could allow authenticated users to execute arbitrary code (CVSS 8.0)
- [CVE-2019-3630](https://cve.now/CVE-2019-3630.md): Command Injection could allow authenticated users to execute arbitrary code (CVSS 8.0)
- [CVE-2019-3629](https://cve.now/CVE-2019-3629.md): Application protections bypass vulnerability could allow unauthenticated user to impersonate system users (CVSS 8.3)
- [CVE-2019-3628](https://cve.now/CVE-2019-3628.md): Privilege escalation could allow authenticated user to gain access to a core system (CVSS 7.5)
- [CVE-2019-3586](https://cve.now/CVE-2019-3586.md): McAfee Endpoint Security firewall not always acting on GTI lookup results (CVSS 7.5)
- [CVE-2019-3602](https://cve.now/CVE-2019-3602.md): Cross site scripting vulnerability in McAfee NSM impacting authenticated users (CVSS 4.8)
- [CVE-2019-3612](https://cve.now/CVE-2019-3612.md): Information disclosure vulnerability in McAfee TIE Server and DXL Platform (CVSS 8.2)
- [CVE-2019-3606](https://cve.now/CVE-2019-3606.md): Data leakage when in an MDR pair by McAfee Network Security Manager 9.x (CVSS 7.7)
- [CVE-2019-3597](https://cve.now/CVE-2019-3597.md): Authentication bypass in McAfee Network Security Manager 9.x (CVSS 6.5)
- [CVE-2019-3599](https://cve.now/CVE-2019-3599.md): McAfee Agent update fixes an Information Disclosure vulnerability (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/mcafee
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.