Skip to content
Noroxi

McAfee records

607 published records for vendor McAfee. 2 of them have been exploited in the wild (listed in CISA KEV) and 8 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
2 · 0.3%
Weaponized
8 · 1.3%
Pre-auth RCE
45
With a fix record
12.5%
Median publish → KEV
351 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

607 records
  • CVE-2021-3156
    91Now

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root

    HighCVSS 7.8KEVWeaponizedEPSS 99%

    sudo project · sudoJan 26, 2021

  • CVE-2006-5156
    62This week

    Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbi

    CriticalCVSS 10.0WeaponizedEPSS 74%

    mcafee · epolicy orchestratorOct 5, 2006

  • CVE-2021-23874
    61This week

    McAfee Total Protection (MTP) privilege escalation vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    mcafee · total protectionFeb 10, 2021

  • CVE-2019-9515
    56Plan

    Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

    HighCVSS 7.5No exploitEPSS 87%

    apple · swiftnioAug 13, 2019

  • CVE-2020-13935
    56Plan

    The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.

    HighCVSS 7.5Proof of conceptEPSS 86%

    apache · tomcatJul 14, 2020

  • CVE-2019-9514
    55Plan

    Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

    HighCVSS 7.5No exploitEPSS 82%

    apple · swiftnioAug 13, 2019

  • CVE-2019-9513
    54Plan

    Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service

    HighCVSS 7.5Proof of conceptEPSS 81%

    apple · swiftnioAug 13, 2019

  • CVE-2004-0932
    49Plan

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attac

    HighCVSS 7.5Proof of conceptEPSS 63%

    ca · etrust antivirusJan 27, 2005

  • CVE-2019-9511
    48Plan

    Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

    HighCVSS 7.5Proof of conceptEPSS 59%

    apple · swiftnioAug 13, 2019

  • CVE-2012-1459
    47Plan

    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8

    MediumCVSS 4.3No exploitEPSS 99%

    ahnlab · v3 internet securityMar 21, 2012

  • CVE-2012-1443
    47Plan

    The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010

    MediumCVSS 4.3No exploitEPSS 99%

    cat · quick healMar 21, 2012

  • CVE-2012-1456
    47Plan

    The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.

    MediumCVSS 4.3No exploitEPSS 99%

    avg · avg anti-virusMar 21, 2012

  • CVE-2012-1457
    47Plan

    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.

    MediumCVSS 4.3No exploitEPSS 99%

    anti-virus · vba32Mar 21, 2012

  • CVE-2012-1446
    47Plan

    The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Syman

    MediumCVSS 4.3No exploitEPSS 99%

    ca · etrust vet antivirusMar 21, 2012

  • CVE-2012-1431
    47Plan

    The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Sec

    MediumCVSS 4.3No exploitEPSS 99%

    bitdefender · bitdefenderMar 21, 2012

  • CVE-2012-1430
    47Plan

    The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning E

    MediumCVSS 4.3No exploitEPSS 99%

    bitdefender · bitdefenderMar 21, 2012

  • CVE-2012-1442
    47Plan

    The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwas

    MediumCVSS 4.3No exploitEPSS 98%

    cat · quick healMar 21, 2012

  • CVE-2006-6707
    47Plan

    Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control (NeoTraceExplorer.dll) in NeoTrace Express 3.25 and NeoTr

    HighCVSS 7.5WeaponizedEPSS 56%

    mcafee · neotraceDec 22, 2006

  • CVE-2012-1461
    46Plan

    The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Ant

    MediumCVSS 4.3No exploitEPSS 98%

    anti-virus · vba32Mar 21, 2012

  • CVE-2012-1453
    46Plan

    The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Tre

    MediumCVSS 4.3No exploitEPSS 97%

    ca · etrust vet antivirusMar 21, 2012

  • CVE-2012-4598
    46Plan

    An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code

    CriticalCVSS 9.3WeaponizedEPSS 29%

    mcafee · mcafee virtual technicianAug 22, 2012

  • CVE-2012-1463
    45Plan

    The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5

    MediumCVSS 4.3No exploitEPSS 93%

    ahnlab · v3 internet securityMar 21, 2012

  • CVE-2012-1425
    45Plan

    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1

    MediumCVSS 4.3No exploitEPSS 92%

    antiy · avl sdkMar 21, 2012

  • CVE-2012-1429
    45Plan

    The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.

    MediumCVSS 4.3No exploitEPSS 91%

    comodo · comodo antivirusMar 21, 2012

  • CVE-2020-9484
    45Plan

    When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able

    HighCVSS 7.0Proof of conceptEPSS 55%

    apache · tomcatMay 20, 2020