CVE-2021-31840: fallo de gravedad alta en McAfee Agent for Windows
DLL preload vulnerability in McAfee Agent for Windows
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.3epss 0.3%
A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. This would result in the user gaining elevated permissions and being able to execute arbitrary code.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Productos afectados
McAfee,LLC · McAfee Agent for WindowsCVEs relacionadas — McAfee Agent for Windows
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-0166HIGHPrivilege escalation vulnerability in McAfee AgentEPSS 2.9%CVE-2021-31854HIGHCode injection vulnerability in McAfee AgentEPSS 1.0%CVE-2021-31847HIGHImproper privilege management in repair process of MA for WindowsEPSS 0.4%CVE-2022-1256HIGHImproper Privilege Management in McAfee Agent for WindowsEPSS 0.3%CVE-2021-31841HIGHDLL side loading vulnerability in MA for WindowsEPSS 0.2%CVE-2021-31836MEDIUMImproper Privilege Management in MA for WindowsEPSS 0.2%