mcafee drive encryption vulnerabilities

Latest mcafee drive encryption CVEs

Newest publication first

1. CVE-2021-31853 MDE DLL Search Order Hijacking vulnerability

   Published 2021-11-10

   High·CVSS 7.8 EPSS 0.20%

   DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.

2. CVE-2021-23893 Privilege Escalation vulnerability in McAfee Drive Encryption (MDE)

   Published 2021-10-01

   High·CVSS 7.8 EPSS 0.15%

   Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an unutilized memory buffer.

3. CVE-2018-6686 Drive Encryption (MDE) - Authentication Bypass vulnerability

   Published 2018-07-27

   Medium·CVSS 6.6 EPSS 0.24%

   Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption (MDE) 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.