← Back

CVE-2019-3648

nvd nist
Published: Nov 13, 2019Modified: Jun 17, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.

Affected (3)

Mcafee
3 products
Anti Virus Plus
Internet Security
Total Protection
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Anti Virus Plus
Up to 16.0.r22
Internet Security
Up to 16.0.r22
Total Protection
Up to 16.0r22

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (4)

Source: trellixpsirt@trellix.com
Source: trellixpsirt@trellix.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.