Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2019-3588

Using VSE to bypass Windows Credentials on Lock screen

Description

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee, LLC McAfee VirusScan Enterprise (VSE)

  • 8.8.x to < 8.8 Patch 14affected

References