CVEvulnerability

CVE-2019-3646

6.5 MEDIUM Published 2019-09-13 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2019-09-13
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.9 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
CVSS 3.1 ([email protected]): 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
Weaknesses: CWE-426, CWE-714

Description

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights.

Affected configurations

• mcafee total protection (<= 16.0.r18)

Weakness · not in database (1)

CWE-714

Weakness · CWE (1)

CWE-426 Untrusted Search Path weakness

References