McAfee vulnerabilities
275 CVEs and advisories name McAfee as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-6669Bypass Application Control through an ASP.NET form
- CVE-2018-6707McAfee Agent Insecure usage of temporary files vulnerability
- CVE-2018-6706McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability
- CVE-2018-6705McAfee Agent (MA) for Linux Privilege Escalation vulnerability
- CVE-2018-6704McAfee Agent for Linux Privilege Escalation vulnerability
- CVE-2018-6703Remote Logging functionality had a use after free vulnerability in McAfee Agent
- CVE-2018-6757True Key (TK) Windows Client - Privilege Escalation vulnerability
- CVE-2018-6756True Key (TK) Windows Client - Authentication Abuse vulnerability
- CVE-2018-6755True Key (TK) Windows Client - Weak Directory Permission Vulnerability
- CVE-2018-6695Threat Intelligence Exchange Server (TIE Server) SSH host keys generation vulnerability
- CVE-2018-6689Data Loss Prevention Endpoint (DLPe) - Authentication Bypass vulnerability
- CVE-2018-6700True Key (TK) - DLL Search Order Hijacking vulnerability
- CVE-2018-6682True Key (TK) - Cross Site Scripting Exposure
- CVE-2018-6693Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability
- CVE-2018-6690McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC
- CVE-2017-3912McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass
- CVE-2018-6686Drive Encryption (MDE) - Authentication Bypass vulnerability
- CVE-2018-6683- Data Loss Prevention (DLP) for Windows - Exploiting Incorrectly Configured Access Control Security Levels vulnerability
- CVE-2018-6678McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability
- CVE-2018-6677McAfee Web Gateway (MWG) - Directory Traversal vulnerability
- CVE-2018-6681SB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability
- CVE-2018-6667McAfee Web Gateway - Authentication Bypass vulnerability
- CVE-2018-6672SB10240 - ePolicy Orchestrator (ePO) - Information disclosure vulnerablity
- CVE-2018-6671SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability
- CVE-2017-3936McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability
- CVE-2017-3907McAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability
- CVE-2017-3968McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability
- CVE-2017-3962McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability
- CVE-2017-3960McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability
- CVE-2018-6670External Entity Attack vulnerability in McAfee Common UI (CUI)