McAfee vulnerabilities
275 CVEs and advisories name McAfee as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-3637Privilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.209
- CVE-2019-3639MWG UI: Cross-Frame Scripting vulnerability
- CVE-2019-3635MWG Proxy: Cross-Frame Scripting vulnerability
- CVE-2019-3621DLP Endpoint Windows lock screen bypass with physical access
- CVE-2019-3622DLP Endpoint log file redirection to arbitrary locations
- CVE-2019-3591DLP Endpoint ePO extension vulnerable to XSS
- CVE-2019-3595DLP Endpoint ePO extension not sanitizing CSV exports
- CVE-2019-3592MA for Windows update addresses weak directory permissions
- CVE-2019-3619Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 all
- CVE-2019-3632Directory Traversal vulnerability could lead to elevated privileges
- CVE-2019-3631Command Injection could allow authenticated users to execute arbitrary code
- CVE-2019-3630Command Injection could allow authenticated users to execute arbitrary code
- CVE-2019-3629Application protections bypass vulnerability could allow unauthenticated user to impersonate system users
- CVE-2019-3628Privilege escalation could allow authenticated user to gain access to a core system
- CVE-2019-3586McAfee Endpoint Security firewall not always acting on GTI lookup results
- CVE-2019-3602Cross site scripting vulnerability in McAfee NSM impacting authenticated users
- CVE-2019-3612Information disclosure vulnerability in McAfee TIE Server and DXL Platform
- CVE-2019-3606Data leakage when in an MDR pair by McAfee Network Security Manager 9.x
- CVE-2019-3597Authentication bypass in McAfee Network Security Manager 9.x
- CVE-2019-3599McAfee Agent update fixes an Information Disclosure vulnerability
- CVE-2019-3598McAfee Agent update fixes a vulnerability in handling UDP requests
- CVE-2019-3582McAfee Endpoint Security updates fix a privilege escalation vulnerability
- CVE-2018-6687GetSusp (a free McAfee tool) update fixes an infinite loop vulnerability (CVE-2018-6687)
- CVE-2019-3610True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability
- CVE-2019-3604ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities
- CVE-2019-3593Exploitation of Privilege/Trust vulnerability
- CVE-2019-3587DLL Search Order Hijacking vulnerability
- CVE-2019-3584Exploitation of Authentication vulnerability
- CVE-2019-3581McAfee Web Gateway denial of service attack due to Improper Input Validation
- CVE-2018-6668Bypass Application Control with simple DLL