CVE-2019-3646: McAfee Total Protection

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights.

Affected products

• McAfee Total Protection: up to and including 16.0.r18

Published 2019-09-13. Last modified 2026-06-17.