McAfee True Key vulnerabilities

8 CVEs affecting McAfee True Key, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7299, published 2020-09-04.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-6757, published 2018-12-06. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.
• CVE-2018-6756, published 2018-12-06. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.
• CVE-2018-6755, published 2018-12-06. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.
• CVE-2018-6700, published 2018-09-24. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware.
• CVE-2018-6661, published 2018-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature.
• CVE-2018-6682, published 2018-09-24. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cross Site Scripting Exposure in McAfee True Key (TK) 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site.
• CVE-2020-7299, published 2020-09-04. Medium severity, CVSS 4.1. EPSS: 0.4% chance of exploitation in the next 30 days. Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges…
• CVE-2019-3610, published 2019-02-13. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key (TK) 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware.