CVE-2019-3636

CVE-2019-3636 is a File Masquerade vulnerability affecting McAfee Total Protection (MTP) version 16.0.R21 and earlier on Windows clients. This flaw allows an authenticated local attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry. The vulnerability carries a CVSS score of 7.8 (High), indicating a significant risk where an attacker could potentially replace excluded legitimate files with malware, leading to high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.