CVE-2021-23893

Published: Oct 1, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an unutilized memory buffer.

Affected (2)

Products: Mcafee: Drive Encryption

Mcafee

1 product

Drive Encryption

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mcafee Drive Encryption	Before 7.3.0
Mcafee Drive Encryption	Version 7.3.0

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10361

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10361

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.