VULNERABILITY INTELLIGENCE
CVE-2019-3667
CVSS score6.6 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2019-12-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
Description
DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker.
Weakness classification
- CWE-427: Uncontrolled Search Path Element