CVE-2019-3636

File masquerade attack vulnerability in McAfee Total Protection

High · published October 28, 2019

CVSS v3.1
7.5
EPSS
0%
Percentile
12.4
In the wild
Unconfirmed
What it is

A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.4th percentile
Published
2019-10-28T14:23Z
EPSS history
Timeline
  • 28 OCT 14:23Z
    File masquerade attack vulnerability in McAfee Total Protection
    cvelistv5