McAfee Techcheck vulnerabilities

2 CVEs affecting McAfee Techcheck, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-0129, published 2022-01-11.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3667, published 2019-12-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an…
• CVE-2022-0129, published 2022-01-11. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of privileges to system…