CVE-2019-3585CWE-269

VSE Escalation of Privileges through Alert pop-up window

High · published June 10, 2020

CVSS v3.1
7.0
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.7th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-06-10T11:42Z
EPSS history
Timeline
  • 10 JUN 11:42Z
    VSE Escalation of Privileges through Alert pop-up window
    cvelistv5