CVE-2021-31840CWE-427

DLL preload vulnerability in McAfee Agent for Windows

High · published June 10, 2021

CVSS v3.1
7.3
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. This would result in the user gaining elevated permissions and being able to execute arbitrary code.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2021-06-10T16:20Z
EPSS history
Timeline
  • 10 JUN 16:20Z
    DLL preload vulnerability in McAfee Agent for Windows
    cvelistv5