CVE-2021-31841
High
Description
A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gaining elevated permissions and the ability to execute arbitrary code as the system user, through not checking the DLL signature.
SeverityHigh
CVSS8.2
Exploit probability—
ProductMcafee Agent
PublishedSep 22, 2021
First seenSep 22, 2021
Weakness typeCWE-426CWE-426CWE-347CWE-347
How to fix
Update
- mcafee mcafee_agent5.7.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee mcafee_agent | v < 5.7.4 | 5.7.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.