CVE-2019-3648: McAfee Anti-Virus Plus

Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days.

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.

Affected products

• McAfee Anti-Virus Plus: up to and including 16.0.r22
• McAfee Internet Security: up to and including 16.0.r22
• McAfee Total Protection: up to and including 16.0r22

Published 2019-11-13. Last modified 2026-06-17.