McAfee's vulnerability footprint spans a broadly represented portfolio of enterprise security products including endpoint protection, network defense, and centralized management platforms that are pervasively deployed across large organizations. The vendor's disclosures cluster around application-layer weaknesses such as cross-site scripting, privilege-management flaws, and information-exposure issues, many of which carry elevated tendency toward public exploit availability. McAfee's products—notably ePolicy Orchestrator, Web Gateway, Endpoint Security, and its network data-loss prevention and virus-scanning tools—represent high-value consolidation points in security infrastructure where a vulnerability can affect detection, management, and enforcement across an entire environment. Defenders should treat McAfee advisories as affecting both detection bypass risk and administrative control, prioritizing updates to internet-facing or centrally managed instances. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Mcafee over time
Signals from CVEs in this vendor scope (605 CVEs).
605 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-3156HIGH Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg | Jan 26, 2021 | 7.8 | 99 | YES | YES |
CVE-2006-5156HIGH Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ | Oct 5, 2006 | 10.0 | 82 | NO | YES |
CVE-2020-13935HIGH The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payl | Jul 14, 2020 | 7.5 | 77 | NO | YES |
CVE-2004-0230MEDIUM TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by | Aug 18, 2004 | 5.0 | 74 | NO | YES |
CVE-2012-1459MEDIUM The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10 | Mar 21, 2012 | 4.3 | 71 | NO | NO |
CVE-2004-0932HIGH McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via | Jan 27, 2005 | 7.5 | 71 | NO | YES |
CVE-2012-1457MEDIUM The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka | Mar 21, 2012 | 4.3 | 70 | NO | NO |
CVE-2012-1456MEDIUM The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6. | Mar 21, 2012 | 4.3 | 69 | NO | NO |
CVE-2012-1443MEDIUM The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protectio | Mar 21, 2012 | 4.3 | 69 | NO | NO |
CVE-2012-1442MEDIUM The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky | Mar 21, 2012 | 4.3 | 69 | NO | NO |
Signals from CVEs in this vendor scope (605 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Mcafee.
Media articles that mention a CVE ID that affects a product developed by Mcafee — matched by CVE ID, not by vendor name.