VULNERABILITY INTELLIGENCE
CVE-2017-4028
CVSS score5 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2018-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N
Description
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.
Weakness classification
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')