McAfee
Number 66 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: McAfee, Mcafee, mcafee
Total vulnerabilities
277
Critical
8
High
106
Known Exploited
1
Exploit available
4
Network, no login needed
13.7%
Of 256 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2024 | 2 | 1 | 0 | 1 | 0 | 0 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2022 | 19 | 0 | 10 | 7 | 2 | 0 |
| 2021 | 53 | 3 | 22 | 25 | 2 | 1 |
| 2020 | 86 | 1 | 37 | 45 | 3 | 0 |
| 2019 | 51 | 1 | 21 | 27 | 2 | 0 |
| 2018 | 46 | 2 | 16 | 21 | 7 | 0 |
| 2017 | 20 | 0 | 0 | 0 | 0 | 20 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| McAfee Endpoint Security (ENS) | 16 | 6 |
| Network Security Management (NSM) | 16 | 6 |
| McAfee Web Gateway (MWG) | 13 | 5 |
| Advanced Threat Defense (ATD) | 12 | 4 |
| McAfee ePolicy Orchestrator (ePO) | 12 | 0 |
| McAfee Total Protection (MTP) | 11 | 10 |
| McAfee Agent for Windows | 8 | 6 |
| Network Data Loss Prevention (NDLP) | 7 | 0 |
| DLP ePO extension | 6 | 1 |
| Endpoint Security for Windows | 6 | 2 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Privilege Escalation | 29 | 18 |
| Cross-Site Scripting | 19 | 1 |
| Improper Handling of Insufficient Privileges | 11 | 11 |
| Improper Link Resolution Before File Access ('Link Following') | 9 | 8 |
| Authentication Issues | 7 | 1 |
| Information Disclosure | 6 | 1 |
| Permissions, Privileges, and Access Controls | 6 | 2 |
| Credential Exposure | 5 | 0 |
| Memory Corruption | 5 | 3 |
| SQL Injection | 4 | 3 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2021-23874 | McAfee Total Protection (MTP) privilege escalation vulnerability | High | 1.1% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2024-49592 | mcafee total_protection vulnerability | Medium | 0.2% | |
| CVE-2024-34405 | mcafee antivirus_vpn_for_android: Code Injection | Critical | 0.5% | |
| CVE-2022-1824 | McAfee MCPR privilege escalation | High | 0.4% | |
| CVE-2022-1823 | McAfee MCPR privilege escalation | High | 0.3% | |
| CVE-2022-1254 | SWG URL redirection vulnerability | Medium | 0.8% | |
| CVE-2022-1258 | SQL injection vulnerability in McAfee Agent's ePO extension | High | 1.0% | |
| CVE-2022-1257 | Improper Verification of Cryptographic Signature by McAfee Agent | Medium | 0.7% | |
| CVE-2022-1256 | Improper Privilege Management in McAfee Agent for Windows | High | 0.3% | |
| CVE-2022-0862 | ePO password change vulnerability | Low | 0.7% | |
| CVE-2022-0861 | ePO XML extended entity vulnerability | Low | 0.5% |