CVE-2021-23883

A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to this update.

Score

CVSS 3.1 4.4 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2021-02-10

Last modified

2024-09-17

Weaknesses

CWE-476

Affected products

• Endpoint Security (Mcafee)
• Endpoint Security Ens For Windows (Mcafee Llc)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10345