CVE-2022-0166: McAfee Agent

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and executed arbitrary code with SYSTEM privileges by creating the appropriate pathway to the specifically created malicious openssl.cnf file.

Affected products

• McAfee Agent: before 5.7.5 (fixed in 5.7.5)

Published 2022-01-19. Last modified 2026-06-17.