Advisories · Technology
McAfee, LLC McAfee Endpoint Security (ENS).
Every CVE that names McAfee, LLC McAfee Endpoint Security (ENS) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Unquoted service executable path in McAfee Endpoint Security (ENS)
- McAfee, LLC McAfee Endpoint Security (ENS)
- CWE-428
- CVSS 3.9 Low
Privilege Escalation vulnerability in ENS
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-264
- CVSS 8.2 High
ENS symbolic link log file manipulation vulnerability
- McAfee LLC McAfee Endpoint Security (ENS)
- Path traversal
- CVSS 8.4 High
Privilege Escalation vulnerability through Symbolic links in ENS
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-264
- CVSS 6.6 Medium
Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-264
- CVSS 6.1 Medium
Buffer overwrite in ENS allowed to bypass AMSI protection
- McAfee LLC McAfee Endpoint Security (ENS)
- Memory corruption
- CVSS 6.7 Medium
Autorun registry bypass
- McAfee LLC McAfee Endpoint Security (ENS)
- Privilege escalation
- CVSS 4.8 Medium
Unquoted service paths for some McAfee ENS files
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-428
- CVSS 6.6 Medium
ENS elevated permissions vulnerability
- McAfee LLC McAfee Endpoint Security (ENS)
- Privilege escalation
- CVSS 6.8 Medium
McAfee processes not protected
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-693
- CVSS 6.4 Medium
Unrestricted Policy Management using MfeUpgradeTool.exe
- McAfee LLC McAfee Endpoint Security (ENS)
- Authentication bypass
- CVSS 7.4 High
McAfee firewall rules not enforced correctly
- McAfee LLC McAfee Endpoint Security (ENS)
- Broken access control
- CVSS 5.0 Medium
ESConfig Tool able to edit configuration for newer version
- McAfee, LLC Mcafee Endpoint Security (ENS)
- CWE-358
- CVSS 4.6 Medium
ESConfig Tool access not controlled
- McAfee, LLC McAfee Endpoint Security (ENS)
- Broken access control
- CVSS 5.0 Medium
ENS code injection in EPSetup.exe
- McAfee, LLC McAfee Endpoint Security (ENS)
- Code injection
- CVSS 7.5 High
McAfee Endpoint Security firewall not always acting on GTI lookup results
- McAfee, LLC McAfee Endpoint Security (ENS)
- CWE-693
- CVSS 8.6 High
McAfee Endpoint Security updates fix a privilege escalation vulnerability
- McAfee, LLC McAfee Endpoint Security (ENS)