CVE-2021-23887: McAfee Data Loss Prevention Endpoint

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending them, modifying the memory and restarting them when they are monitored by McAfee DLP through the hdlphook driver.

Affected products

• McAfee Data Loss Prevention Endpoint: before 11.6.100.41 (fixed in 11.6.100.41)

Published 2021-04-15. Last modified 2026-06-17.