What’s Vulnerable › Products

McAfee Web Gateway (MWG) vulnerabilities

41 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your McAfee Web Gateway (MWG) version is affected

Exploited McAfee Web Gateway (MWG) vulnerabilities

• CVE-2021-3156 — Sudo Heap-Based Buffer Overflow Vulnerability

Latest McAfee Web Gateway (MWG) vulnerabilities

• CVE-2022-1254 — SWG URL redirection vulnerability (CVSS 6.1)
• CVE-2021-3450 — CA certificate check bypass with X509_V_FLAG_X509_STRICT (CVSS 7.4)
• CVE-2021-3449 — NULL pointer deref in signature_algorithms processing (CVSS 5.9)
• CVE-2021-23885 — Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI (CVSS 8.8)
• CVE-2021-3156 — Sudo Heap-Based Buffer Overflow Vulnerability (CVSS 7.8) — exploited
• CVE-2020-7297 — Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 5.7)
• CVE-2020-7296 — Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 5.7)
• CVE-2020-7295 — Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 4.6)
• CVE-2020-7294 — Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 4.6)
• CVE-2020-7293 — Web Gateway (MWG) - Privilege Escalation vulnerability (CVSS 9.0)
• CVE-2020-7292 — Web Gateway (MWG) - Inappropriate Encoding for output context (CVSS 4.3)
• CVE-2019-3638 — Web Gateway (MWG) - Reflected Cross Site Scripting vulnerability (CVSS 9.6)
• CVE-2019-3644 — MWG scanners updated to address CVE-2019-9517 (CVSS 7.5)
• CVE-2019-3643 — MWG scanners updated to address CVE-2019-9511 (CVSS 7.5)
• CVE-2019-3639 — MWG UI: Cross-Frame Scripting vulnerability (CVSS 7.1)
• CVE-2019-3635 — MWG Proxy: Cross-Frame Scripting vulnerability (CVSS 6.5)
• CVE-2019-9518 — Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service (CVSS 7.5)
• CVE-2019-9517 — Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service (CVSS 7.5)
• CVE-2019-9516 — Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service (CVSS 6.5)
• CVE-2019-9515 — Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service (CVSS 7.5)
• CVE-2019-9514 — Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service (CVSS 7.5)
• CVE-2019-9513 — Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service (CVSS 7.5)
• CVE-2019-9511 — Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (CVSS 7.5)
• CVE-2019-6454 — (CVSS 5.5)
• CVE-2019-1559 — 0-byte record padding oracle (CVSS 5.9)