McAfee Drive Encryption vulnerabilities

3 CVEs affecting McAfee Drive Encryption, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-31853, published 2021-11-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-6686, published 2018-07-27. Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days. Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption (MDE) 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of…
CVE-2021-31853, published 2021-11-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escalate privileges via execution from a…
CVE-2021-23893, published 2021-10-01. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an…