CVE-2021-31842: McAfee Endpoint Security

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process.

Affected products

• McAfee Endpoint Security: before 10.7.0 (fixed in 10.7.0); version 10.7.0 only

Published 2021-09-17. Last modified 2026-06-17.