Vendor
McAfee
603 known vulnerabilities in products by McAfee, 2 of them actively exploited (CISA KEV).
Key figures
603
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
31
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2021-3156 | Sudo Heap-Based Buffer Overflow Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2021-23874 | McAfee Total Protection (MTP) privilege escalation vulnerability In CISA KEV | 8.2 | |
| Critical | CVE-2016-0718 | Python Software Foundation CPython: Buffer Overflow | 9.8 | |
| Critical | CVE-2017-3897 | McAfee Live Safe: Code Injection | 9.8 | |
| Critical | CVE-2018-18311 | Perl: Buffer Overflow | 9.8 | |
| Critical | CVE-2016-4448 | XMLSoft libxml2: Format String | 9.8 | |
| Critical | CVE-2016-8027 | McAfee Epolicy Orchestrator: SQL Injection | 10.0 | |
| High | CVE-2019-9515 | F5 Big-ip Local Traffic Manager: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2020-13935 | Apache Tomcat: Infinite Loop | 7.5 | |
| High | CVE-2019-9514 | F5 Big-ip Local Traffic Manager: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9513 | Node: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2019-9169 | GNU glibc: Buffer Over-read | 9.8 | |
| High | CVE-2019-9511 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9516 | Apache Traffic Server: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-23840 | Integer overflow in CipherUpdate | 7.5 | |
| High | CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | 7.4 | |
| High | CVE-2019-9517 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2016-4472 | Python Software Foundation CPython: Denial of Service | 8.1 | |
| High | CVE-2019-9518 | Node: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2018-10381 | McAfee Tunnelbear: Privilege Escalation | 9.8 | |
| Critical | CVE-2018-6667 | McAfee Web Gateway - Authentication Bypass vulnerability | 10.0 | |
| High | CVE-2016-8020 | Intel VirusScan Enterprise Linux (VSEL): Code Execution | 8.0 | |
| High | CVE-2020-9484 | Apache Tomcat: Deserialization of Untrusted Data | 7.0 | |
| High | CVE-2016-8023 | Intel VirusScan Enterprise Linux (VSEL): Authentication Bypass | 8.1 | |
| High | CVE-2016-8024 | Intel VirusScan Enterprise Linux (VSEL): Information Disclosure | 8.1 |