Export limit exceeded: 11140 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,140

Export CSV
CVE-2020-7289

Privilege Escalation vulnerability in MAR for Windows

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee Microsoft
Products
Active Response Windows
CVE-2020-7288

Privilege Escalation vulnerability in EDR for Mac

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple Mcafee
Products
Macos Endpoint Detection And Response
CVE-2020-7287

Privilege Escalation vulnerability in EDR for Linux

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Linux Mcafee
Products
Linux Kernel Endpoint Detection And Response
CVE-2020-7286

Privilege Escalation vulnerability in EDR for Windows

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee Microsoft
Products
Endpoint Detection And Response Windows
CVE-2020-7285

Privilege Escalation vulnerability in MVISION Endpoint

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Mvision Endpoint
CVE-2020-7283

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Total Protection
CVE-2020-7281

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Total Protection
CVE-2020-7280

Symbolic Link vulnerability during DAT update

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Virusscan Enterprise
CVE-2020-7274

ENS elevated permissions vulnerability

Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7273

Autorun registry bypass

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7267

Privilege Escalation vulnerability through symbolic links in VSEL

Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Virusscan Enterprise
CVE-2020-7266

Privilege Escalation vulnerability through symbolic links in VSE for Windows

Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Virusscan Enterprise
CVE-2020-7265

Privilege Escalation vulnerability through symbolic links in ENSM

Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7264

Privilege Escalation vulnerability through symbolic links in ENS for Windows

Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7263

ENS configuration can be edited by attacker with local administrator permissions

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7260

MACC installer DLL side loading

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Application And Change Control
CVE-2020-7259

Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules

Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7257

Privilege Escalation vulnerability through Symbolic links in ENS

Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links whilst an anti-virus scan was in progress. This is timing dependent.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7255

Privilege Escalation vulnerability  in ENS

Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing configuration in the ENS client interface. Administrators can lock the ENS client interface through ePO to prevent users being able to edit the configuration.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Endpoint Security
CVE-2020-7254

Privilege escalation in Advanced Threat Defense

Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Advanced Threat Defense