Mcafee - vulnerabilities (CVEs)
605 CVEs in 208 products, 0 in the last 30 days, newest from 2026-04-04.
Products
- Epolicy Orchestrator - 86 CVEs
- Web Gateway - 41 CVEs
- Endpoint Security - 37 CVEs
- Network Data Loss Prevention - 31 CVEs
- Virusscan Enterprise - 29 CVEs
- Total Protection - 27 CVEs
- Advanced Threat Defense - 26 CVEs
- Data Loss Prevention Endpoint - 26 CVEs
- Agent - 25 CVEs
- Email Gateway - 20 CVEs
- Network Security Manager - 19 CVEs
- Network Security Management Nsm - 16 CVEs
- Gateway - 13 CVEs
- Advanced Threat Defense Atd - 12 CVEs
- Data Loss Prevention - 12 CVEs
- Scan Engine - 12 CVEs
- Email And Web Security - 10 CVEs
- Mcafee Agent - 10 CVEs
- Virusscan - 10 CVEs
- Antivirus Engine - 9 CVEs
- Enterprise Security Manager - 9 CVEs
- Policy Auditor - 9 CVEs
- Database Security - 8 CVEs
- Mcafee Web Gateway Mwg - 8 CVEs
- Network Data Loss Prevention Ndlp - 8 CVEs
- True Key - 8 CVEs
- Active Response - 7 CVEs
- Application Control - 7 CVEs
- Security Scan Plus - 7 CVEs
- Threat Intelligence Exchange Server - 7 CVEs
- Application And Change Control - 6 CVEs
- Dlp Epo Extension - 6 CVEs
- E-business Server - 6 CVEs
- Enterprise Mobility Manager - 6 CVEs
- Epolicy Orchestrator Epo - 6 CVEs
- Mvision Endpoint - 6 CVEs
- Protectionpilot - 6 CVEs
- Vulnerability Manager - 6 CVEs
- Common Management Agent - 5 CVEs
- Data Exchange Layer - 5 CVEs
- Internet Security Suite - 5 CVEs
- Mcafee Web Gateway - 4 CVEs
- Application Change Control - 3 CVEs
- Change Control - 3 CVEs
- Cloud Av - 3 CVEs
- Drive Encryption - 3 CVEs
- Endpoint Detection And Response - 3 CVEs
- Epolicy Orchestrator Agent - 3 CVEs
- File And Removable Media Protection - 3 CVEs
- Host Intrusion Prevention - 3 CVEs
- Intrushield Security Management System - 3 CVEs
- Livesafe - 3 CVEs
- Mcafee Agent Ma For Linux - 3 CVEs
- Mcafee Total Protection Mtp - 3 CVEs
- Saas Endpoint Protection - 3 CVEs
- Security Webadvisor - 3 CVEs
- Virex - 3 CVEs
- Webadvisor - 3 CVEs
- Anti-malware Scan Engine - 2 CVEs
- Anti-virus Plus - 2 CVEs
- Asset Manager - 2 CVEs
- Cloud Single Sign On - 2 CVEs
- Cma - 2 CVEs
- Consumer Product Removal Tool - 2 CVEs
- Data Loss Prevention Dlp Epo Extension - 2 CVEs
- Data Loss Prevention Endpoint Dlpe - 2 CVEs
- Data Loss Preventiondlp - 2 CVEs
- Enterprise Mobility Manager Agent - 2 CVEs
- Epo Deep Command - 2 CVEs
- Epo Mcafee Virtual Technician - 2 CVEs
- Epolicy Orchistrator Epo - 2 CVEs
- File Lock - 2 CVEs
- Getsusp - 2 CVEs
- Internet Security - 2 CVEs
- Intrushield Network Security Manager - 2 CVEs
- Live Safe - 2 CVEs
- Mcafee Virtual Technician - 2 CVEs
- Network Security Management - 2 CVEs
- Personal Firewall Plus - 2 CVEs
- Security Center - 2 CVEs
- Smartfilter - 2 CVEs
- Superscan - 2 CVEs
- Techcheck - 2 CVEs
- Threat Intelligence Exchange - 2 CVEs
- True Key Tk - 2 CVEs
- Web Gateway Cloud Service - 2 CVEs
- Webshield Smtp - 2 CVEs
- Active Virus Defense - 1 CVEs
- Active Virusscan - 1 CVEs
- Agent Epolicy Orchestrator Extension - 1 CVEs
- Antispyware - 1 CVEs
- Antivirus Vpn For Android - 1 CVEs
- Asap Virusscan - 1 CVEs
- Client Proxy - 1 CVEs
- Client Proxy Mcp - 1 CVEs
- Cloud Analysis And Deconstructive Services - 1 CVEs
- Cloud Identity Manager - 1 CVEs
- Common Catalog - 1 CVEs
- Common Ui Cui - 1 CVEs
- Content Security Reporter - 1 CVEs
- Data Loss Prevention Discover - 1 CVEs
- Data Loss Prevention Dlp Endpoint - 1 CVEs
- Data Loss Prevention Dlp For Windows - 1 CVEs
- Drive Encryption Mde - 1 CVEs
- Email And Web Security Appliance - 1 CVEs
- Encrypted Usb Manager - 1 CVEs
- Endpoint Encryption For Files And Folders - 1 CVEs
- Endpoint Product Removal Tool - 1 CVEs
- Endpoint Security For Linux Threat Prevention - 1 CVEs
- Endpoint Security For Linux Threat Prevention Ensltp - 1 CVEs
- Endpoint Security Linux Threat Prevention - 1 CVEs
- Entercept Agent - 1 CVEs
- Enterprise Security Manager/log Manager - 1 CVEs
- Enterprise Security Manager/receiver - 1 CVEs
- File Removable Media Protection Frp - 1 CVEs
- Firewall Reporter - 1 CVEs
- Freescan - 1 CVEs
- Groupshield - 1 CVEs
- Host Data Loss Prevention - 1 CVEs
- Host Intrusion Prevention Services - 1 CVEs
- Linuxshield - 1 CVEs
- Management Of Native Encryption - 1 CVEs
- Mcafee Agent Ma Non-windows Non-windows Versions - 1 CVEs
- Mcafee Anti-virus Plus Avp - 1 CVEs
- Mcafee Application Control And Change Control Macc - 1 CVEs
- Mcafee Application Control Mac - 1 CVEs
- Mcafee Email Gateway Meg - 1 CVEs
- Mcafee Endpoint Security Ens - 1 CVEs
- Mcafee Enterprise Security Manager - 1 CVEs
- Mcafee Framework - 1 CVEs
- Mcafee Host Intrusion Prevention Host Ips - 1 CVEs
- Mcafee Internet Security Mis - 1 CVEs
- Mcafee Management Of Native Encryption Mne - 1 CVEs
- Mcafee Threat Intelligence Exchange - 1 CVEs
- Mcafee Total Protection For Windows - 1 CVEs
- Mcafee Virus Scan Enterprise Vse - 1 CVEs
- Mcafee Webadvisor - 1 CVEs
- Mcinsctl.dll - 1 CVEs
- Mvision Edr - 1 CVEs
- Mvision Endpoint Detection And Response - 1 CVEs
- Neotrace - 1 CVEs
- Netschedscan - 1 CVEs
- Network Agent - 1 CVEs
- Privacy Service - 1 CVEs
- Quickclean - 1 CVEs
- Remote Desktop 32 - 1 CVEs
- Saas Control Console Platform - 1 CVEs
- Safe Connect - 1 CVEs
- Safeboot Device Encryption - 1 CVEs
- Secure Mail - 1 CVEs
- Security Information And Event Management - 1 CVEs
- Security Installer Control System - 1 CVEs
- Securitycenter Agent - 1 CVEs
- Securityshield For Email Servers - 1 CVEs
- Securityshield For Microsoft Isa Server - 1 CVEs
- Securityshield For Microsoft Sharepoint - 1 CVEs
- Smartfilter Administration - 1 CVEs
- Spamkiller - 1 CVEs
- Threat Intelligence Exchange Server Tie Server - 1 CVEs
- Threat Intelligence Exchange Tie Server - 1 CVEs
- Total Protection 2010 - 1 CVEs
- Total Protection For Endpoint - 1 CVEs
- Total Protection Mtp - 1 CVEs
- Tunnelbear - 1 CVEs
- Unified Threat Management Firewall Firmware - 1 CVEs
- Virus Scan Enterprise - 1 CVEs
- Virusscan Commandline - 1 CVEs
- Virusscan Plus - 1 CVEs
- Virusscan Security Center - 1 CVEs
- Virusscan Usb - 1 CVEs
- Visual Trace - 1 CVEs
- Web Advisor - 1 CVEs
- Web Gatewaymwg - 1 CVEs
- Wireless Home Network Security - 1 CVEs
- Antispyware Enterprise Module - 0 CVEs
- Asset Baseline Monitor - 0 CVEs
- Asset Baseline Monitor Agent - 0 CVEs
- Direct Trial Build - 0 CVEs
- Dlp Agent - 0 CVEs
- Dlp Management Tools - 0 CVEs
- E-appliance - 0 CVEs
- Firewall Admin Console - 0 CVEs
- Firewall Enterprise Admin Console - 0 CVEs
- Firewall Enterprise Control Center - 0 CVEs
- Groupshield For Exchange - 0 CVEs
- Hercules Administrator - 0 CVEs
- Host Intrusion Prevention Server - 0 CVEs
- Neotrace Express - 0 CVEs
- Neotrace Pro - 0 CVEs
- Network Security Platform - 0 CVEs
- Policy Auditor Agent - 0 CVEs
- Policy Auditor Content Creator - 0 CVEs
- Portalshield For Microsoft Sharepoint Server - 0 CVEs
- Quarantine Manager - 0 CVEs
- Remote Desktop - 0 CVEs
- Rogue System Detection Sensor - 0 CVEs
- Rogue System Detection Server - 0 CVEs
- Securify Distributed Login Collector - 0 CVEs
- Securify Securvantage Studio - 0 CVEs
- Securify Studio - 0 CVEs
- Security For Microsoft Exchange - 0 CVEs
- Securitycenter - 0 CVEs
- Siteadvisor - 0 CVEs
- Siteadvisor Enterprise - 0 CVEs
- Unified Threat Management Firewall - 0 CVEs
- Virusscan Enterprise For Linux - 0 CVEs
- Virusscan Mobile Enterprise - 0 CVEs
- Webshield - 0 CVEs
Newest CVEs of Mcafee
- CVE-2016-20050 - CVSS 6.9 (medium), 2026-04-04: NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an…
- CVE-2024-49592 - CVSS 6.7 (medium), 2024-11-15: Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path…
- CVE-2024-25254 - CVSS 9.8 (critical), 2024-11-11: SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter.
- CVE-2024-34405 - CVSS 9.1 (critical), 2024-06-11: Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app.
- CVE-2023-5445 - CVSS 5.4 (medium), 2023-11-17: An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the…
- CVE-2023-5444 - CVSS 8 (high), 2023-11-17: A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new…
- CVE-2023-40352 - CVSS 7.2 (high), 2023-08-21: McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs.
- CVE-2023-3946 - CVSS 6.1 (medium), 2023-07-26: A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated attacker to potentially obtain access to…
- CVE-2023-25134 - CVSS 6.7 (medium), 2023-03-21: McAfee Total Protection prior to 16.0.50 may allow an adversary (with full administrative access) to modify a McAfee specific Component Object Model (COM) in…
- CVE-2023-0978 - CVSS 6.7 (medium), 2023-03-13: A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary…
- CVE-2023-24577 - CVSS 5.5 (medium), 2023-03-13: McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a…
- CVE-2023-24579 - CVSS 7.8 (high), 2023-03-13: McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt.
- CVE-2023-24578 - CVSS 5.5 (medium), 2023-03-13: McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to…
- CVE-2023-0221 - CVSS 4.4 (medium), 2023-01-13: Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution…
- CVE-2022-43751 - CVSS 7.8 (high), 2022-11-23: McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a…
- CVE-2022-2188 - CVSS 6.5 (medium), 2022-11-07: Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory…
- CVE-2022-3339 - CVSS 6.1 (medium), 2022-10-18: A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to…
- CVE-2022-3338 - CVSS 5.4 (medium), 2022-10-18: An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side…
- CVE-2022-2330 - CVSS 6.5 (medium), 2022-08-30: Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP…
- CVE-2022-37025 - CVSS 7.8 (high), 2022-08-18: An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file…
- CVE-2022-2313 - CVSS 8.2 (high), 2022-07-27: A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher…
- CVE-2022-1824 - CVSS 8.2 (high), 2022-06-20: An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a…
- CVE-2022-1823 - CVSS 7.9 (high), 2022-06-20: Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local user to modify a…
- CVE-2022-1254 - CVSS 6.1 (medium), 2022-04-20: A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and…
- CVE-2022-1258 - CVSS 8.4 (high), 2022-04-14: A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO…
- CVE-2022-1257 - CVSS 6.1 (medium), 2022-04-14: Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive…
- CVE-2022-1256 - CVSS 7.8 (high), 2022-04-14: A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the…
- CVE-2022-0857 - CVSS 6.1 (medium), 2022-03-23: A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to…
- CVE-2022-0861 - CVSS 3.8 (low), 2022-03-23: A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a…
- CVE-2022-0859 - CVSS 6.7 (medium), 2022-03-23: McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the…
