CVE-2018-6674: medium-severity vulnerability in McAfee, LLC VirusScan Enterprise (VSE)
Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.2%
Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).
CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products
McAfee, LLC · VirusScan Enterprise (VSE)Related CVEs — McAfee, LLC VirusScan Enterprise (VSE)
In the same product, most dangerous first.