Improper Handling of Insufficient Privileges

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

CVEs (42)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-6693 1Mcafee 2Endpoint Security For Linux Threat Prevention Endpoint Security Linux Threat Prevention Jun 17, 2026 Sep 18, 2018 N/A· v4 5.3 MEDIUM· v3 3.3 LOW· v2 An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specif...Show more An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.Show less
CVE-2018-6674 1Mcafee 1Virusscan Enterprise Jun 17, 2026 May 25, 2018 N/A· v4 3.9 LOW· v3 2.1 LOW· v2 Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the syst...Show more Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-6693

1Mcafee

2Endpoint Security For Linux Threat Prevention

Endpoint Security Linux Threat Prevention

Jun 17, 2026

Sep 18, 2018

N/A· v4

5.3 MEDIUM· v3

3.3 LOW· v2

An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.Show less

CVE-2018-6674

1Mcafee

1Virusscan Enterprise

Jun 17, 2026

May 25, 2018

N/A· v4

3.9 LOW· v3

2.1 LOW· v2

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).Show less

Previous 1 23