CVE-2022-1256: McAfee Agent

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file actions were performed on the local user's %TEMP% directory with System privileges through manipulation of symbolic links.

Affected products

  • McAfee Agent: before 5.7.6 (fixed in 5.7.6)

Published 2022-04-14. Last modified 2026-06-17.