CVE-2018-6674

CVE-2018-6674 describes a privilege escalation vulnerability in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13, specifically affecting the McTray.exe component on Microsoft Windows clients. This flaw allows a local user to spawn unrelated processes with elevated privileges if a system administrator has previously granted McTray.exe elevated permissions. While the CVSS score is low (3.9), indicating a low attack complexity and requiring high privileges, it could lead to unauthorized access to sensitive information. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.