McAfee Host Intrusion Prevention vulnerabilities

3 CVEs affecting McAfee Host Intrusion Prevention, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7279, published 2020-06-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-3984, published 2016-04-08. Medium severity, CVSS 5.1. EPSS: 1.1% chance of exploitation in the next 30 days. The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1,…
CVE-2017-4028, published 2018-04-03. Medium severity, CVSS 4.4. EPSS: 0.5% chance of exploitation in the next 30 days. Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee…
CVE-2020-7279, published 2020-06-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access…