Log in Start free

McAfee LLC

Products

ProductCVEsExploitedLatest
McAfee Endpoint Security (ENS)13–Nov 12, 2020
Endpoint Security for Windows6–Nov 12, 2020
Endpoint Security (ENS) for Windows5–Feb 10, 2021
MA for Windows3–Sep 10, 2020
MVISION Endpoint2–Sep 9, 2020
MVISION Endpoint ePO extension2–Nov 11, 2020
McAfee Advanced Threat Defense (ATD)2–Jun 22, 2020
McAfee DXL for Mac shipped with MA1–Sep 10, 2020
McAfee Host Intrusion Prevention System (Host IPS) for Windows1–Jun 10, 2020
McAfee VirusScan Enterprise (VSE)1–Jun 10, 2020
Data Exchange Layer (DXL) Broker1–Feb 17, 2020
VirusScan Enterprise (VSE)1–Dec 9, 2020
Endpoint Product Removal Tool1–Mar 15, 2021
Endpoint Security (ENS) for Window1–Apr 1, 2020
McAfee Agent1–Jan 18, 2021
McAfee Agent (MA)1–Mar 12, 2020
McAfee Application and Change Control1–Aug 26, 2020
Mcafee Application and Change Control (MACC)1–Mar 26, 2020

Exploited and recent CVEs

  • CVE-2021-23879 Medium 6.7 Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and ... 0.3%
  • CVE-2021-23881 Medium 4.8 Stored Cross Site Scripting in ENS 0.6%
  • CVE-2021-23883 Medium 4.0 Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) 0.3%
  • CVE-2021-23882 High 8.2 Improper Access Control in the ENS installer 0.3%
  • CVE-2021-23880 Medium 6.7 Improper Access Control in the ENS installer 0.3%
  • CVE-2021-23878 High 7.3 Clear text storage of sensitive Information in ENS 0.6%
  • CVE-2020-7343 Medium 5.5 Improper Authorization vulnerability in MA 0.4%
  • CVE-2020-7337 Medium 6.5 Incorrect Permission Assignment for Critical Resource 0.4%
  • CVE-2020-7333 Medium 4.8 Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS) 0.5%
  • CVE-2020-7332 High 7.0 Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS) 0.6%
  • CVE-2020-7331 High 7.8 Unquoted service executable path in McAfee Endpoint Security (ENS) 0.4%
  • CVE-2020-7329 High 7.2 Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension 1.7%
  • CVE-2020-7328 High 7.2 Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension 2.2%
  • CVE-2020-7315 Medium 6.0 DLL Injection vulnerability in MA for Windows 0.5%
  • CVE-2020-7314 High 8.2 Privilege Escalation vulnerability in McAfee DXL for Mac 0.4%
  • CVE-2020-7311 High 7.8 Privilege Escalation vulnerability in MA for Windows 0.3%
  • CVE-2020-7312 High 7.8 DLL Search Order Hijacking in MA for Windows 0.3%
  • CVE-2020-7325 Medium 5.5 Privilege Escalation vulnerability in MVISION Endpoint 0.3%
  • CVE-2020-7324 Medium 6.1 Improper Access Control vulnerability in MVISION Endpoint 0.3%
  • CVE-2020-7323 Medium 6.9 Authentication Protection Bypass vulnerability in ENS for Windows 0.3%
  • CVE-2020-7322 Medium 4.7 Exposure of Sensitive Information in ENS for Windows 0.2%
  • CVE-2020-7319 High 8.8 Improper Access Control Vulnerability in ENS for Windows 0.4%
  • CVE-2020-7320 Medium 6.7 Protection Mechanism Failure in ENS for Windows 0.3%
  • CVE-2020-7309 Low 3.9 Cross Site Scripting vulnerability in ePO extension of MACC 0.4%
  • CVE-2020-7262 Medium 5.3 Improper Access Control vulnerability in ATD 0.7%
  • CVE-2020-7280 High 7.8 Symbolic Link vulnerability during DAT update 0.4%
  • CVE-2020-7279 Medium 4.6 DLL search order hijacking in Host IPS 0.4%
  • CVE-2020-7255 Low 3.9 Privilege Escalation vulnerability  in ENS 0.2%
  • CVE-2020-7250 High 8.2 ENS symbolic link log file manipulation vulnerability 0.4%
  • CVE-2020-7257 High 8.4 Privilege Escalation vulnerability through Symbolic links in ENS 0.3%