CVE-2024-34405

Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app.

Score

CVSS 3.1 9.1 Critical

Status

Deferred - cve@mitre.org

Published

2024-06-11

Last modified

2024-08-02

Weaknesses

CWE-94

Affected products

• Antivirus Vpn For Android (Mcafee)

References

• https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html
• https://www.mcafee.com/support/?page=shell&shell=article-view&articleId=000002403