CVE-2019-3585

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - trellixpsirt@trellix.com

Published

2020-06-10

Last modified

2024-09-16

Weaknesses

CWE-269

Affected products

• Virusscan Enterprise (Mcafee)
• Mcafee Virusscan Enterprise Vse (Mcafee Llc)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10302