McAfee Agent

Remote Logging functionality had a use after free vulnerability in McAfee Agent

Code injection vulnerability in McAfee Agent

Cisco DNA Center Cross-Site Request Forgery Vulnerability

SQL injection vulnerability in McAfee Agent's ePO extension

Improper privilege management in repair process of MA for Windows

DLL high jacking in Trellix Agent

Privilege escalation vulnerability in McAfee Agent

McAfee Agent (MA) for Linux Privilege Escalation vulnerability

McAfee Agent for Linux Privilege Escalation vulnerability

Improper Privilege Management in McAfee Agent for Windows

McAfee Agent update fixes an Information Disclosure vulnerability

McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability

DLL search order hijacking in MA

MA for Windows update addresses weak directory permissions

McAfee Agent Insecure usage of temporary files vulnerability

Improper Verification of Cryptographic Signature by McAfee Agent

0-byte record padding oracle

Improper access control vulnerability in McAfee Agent

Improper Authorization vulnerability in MA

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.

McAfee Agent update fixes a vulnerability in handling UDP requests

Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allows attackers to make a McAfee Agent talk with another, possibly rogue, ePO server via McAfee Agent migration to another ePO server.

The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1, Data Loss Prevention Endpoint (DLPe) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control (MDC) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Endpoint Security (ENS) 10.x before 10.1, Host Intrusion Prevention Service (IPS) 8.0 before 8.0.0.3624, and VirusScan Enterprise (VSE) 8.8 before P7 (8.8.0.1528) on Windows allows local administrators to bypass intended self-protection rules and disable the antivirus engine by modifying registry keys.

FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) before 4.5.0.1927 and 4.6 before 4.6.0.3258 allows remote attackers to cause a denial of service (service crash) via a malformed HTTP request.

Incorrect permissions on McAfee Agent for Windows event folder