VULNERABILITY INTELLIGENCE

CVE-2021-23886

CVSS score5.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2021-04-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlphook driver reading invalid memory.

Weakness classification

  • trellixpsirt@trellix.com: CWE-755
  • nvd@nist.gov: CWE-755

Primary references