CVE-2019-3588: medium-severity vulnerability in McAfee VirusScan Enterprise (VSE)
Using VSE to bypass Windows Credentials on Lock screen
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.3%
Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked.
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
McAfee, LLC · McAfee VirusScan Enterprise (VSE)Related CVEs — McAfee VirusScan Enterprise (VSE)
In the same product, most dangerous first.