What’s Vulnerable › Vulnerabilities

CVE-2015-8991

• Severity: high (CVSS 7.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-03-14 · updated 2026-06-17
• Weakness: CWE-264

Description

Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation.

Affected products

• McAfee Cloud Av: all versions
• McAfee Security Scan Plus: all versions
• McAfee Security Webadvisor: 3.7.2, 4.0.1, 4.0.2

References

• https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462
• https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462

Get alerted when CVE-2015-8991 or the next vulnerability affects your stack