McAfee Endpoint Security

Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS)

Improper Access Control Vulnerability in ENS for Windows

Privilege Escalation vulnerability through symbolic links in ENS for Windows

Privilege Escalation vulnerability through symbolic links in ENSM

McAfee Endpoint Security updates fix a privilege escalation vulnerability

Privilege Escalation vulnerability through Symbolic links in ENS

ENS symbolic link log file manipulation vulnerability

Improper Access Control in the ENS installer

Unquoted service executable path in McAfee Endpoint Security (ENS)

Improper access control vulnerability in McAfee ENS for Windows

Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to bypass local security protection via a command-line utility.

Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules

ENS elevated permissions vulnerability

McAfee Endpoint Security firewall not always acting on GTI lookup results

McAfee firewall rules not enforced correctly

Clear text storage of sensitive Information in ENS

Protection Mechanism Failure in ENS for Windows

Authentication Protection Bypass vulnerability in ENS for Windows

McAfee processes not protected

Improper Access Control in the ENS installer

Unrestricted Policy Management using MfeUpgradeTool.exe

Autorun registry bypass

ENS configuration can be edited by attacker with local administrator permissions

Transmission of data in clear text by McAfee ENS

Buffer overwrite in ENS allowed to bypass AMSI protection

ESConfig Tool access not controlled

XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process.

ESConfig Tool able to edit configuration for newer version

ENS code injection in EPSetup.exe

Unquoted service paths for some McAfee ENS files

The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1, Data Loss Prevention Endpoint (DLPe) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control (MDC) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Endpoint Security (ENS) 10.x before 10.1, Host Intrusion Prevention Service (IPS) 8.0 before 8.0.0.3624, and VirusScan Enterprise (VSE) 8.8 before P7 (8.8.0.1528) on Windows allows local administrators to bypass intended self-protection rules and disable the antivirus engine by modifying registry keys.

SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)

Stored Cross Site Scripting in ENS

Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)

Exposure of Sensitive Information in ENS for Windows

Privilege Escalation vulnerability  in ENS