CVEvulnerability
CVE-2019-3648
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-11-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-426
Description
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.
Affected configurations
• mcafee anti-virus plus (<= 16.0.r22)
• mcafee internet security (<= 16.0.r22)
• mcafee total protection (<= 16.0r22)
Related
Weakness · CWE (1)
- CWE-426 Untrusted Search Path weakness
References
- https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648 safebreach.com
- https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984 service.mcafee.com
- https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648 safebreach.com
- https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984 service.mcafee.com