CVE-2021-31841: high-severity vulnerability in McAfee Agent for Windows
DLL side loading vulnerability in MA for Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.2epss 0.2%
A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gaining elevated permissions and the ability to execute arbitrary code as the system user, through not checking the DLL signature.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
McAfee,LLC · McAfee Agent for WindowsRelated CVEs — McAfee Agent for Windows
In the same product, most dangerous first.
CVE-2022-0166HIGHPrivilege escalation vulnerability in McAfee AgentEPSS 2.9%CVE-2021-31854HIGHCode injection vulnerability in McAfee AgentEPSS 1.0%CVE-2021-31847HIGHImproper privilege management in repair process of MA for WindowsEPSS 0.4%CVE-2021-31840HIGHDLL preload vulnerability in McAfee Agent for WindowsEPSS 0.3%CVE-2022-1256HIGHImproper Privilege Management in McAfee Agent for WindowsEPSS 0.3%CVE-2021-31836MEDIUMImproper Privilege Management in MA for WindowsEPSS 0.2%