CVE-2021-23886: McAfee Data Loss Prevention Endpoint

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlphook driver reading invalid memory.

Affected products

• McAfee Data Loss Prevention Endpoint: before 11.6.100.41 (fixed in 11.6.100.41)

Published 2021-04-15. Last modified 2026-06-17.