VULNERABILITY INTELLIGENCE
CVE-2019-3648
CVSS score6.1 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2019-11-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L
Description
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.
Weakness classification
- CWE-426: Untrusted Search Path