CVE-2019-3648

Implicit loading of DLLs

State: Published
Severity: 6.1 Medium
Published: Nov 13, 2019
Updated: Aug 4, 2024
Reserved: Jan 3, 2019

Description

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L	trellix

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
McAfee Total ProtectionMcAfee,LLC	16.0.x to before 16.0.R22 Refresh 1Affected

References

https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984
https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.