The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL preloading attack using unsigned DLLs. This would result in elevation of privileges and the ability to execute arbitrary code as the system user, through not correctly protecting a temporary directory used in the repair process and not checking the DLL signature.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Mcafee Agent | — | Update McAfee Agent to version 5.7.4 | Mar 7, 2022 | Sep 22, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub