What’s Vulnerable › Vulnerabilities

CVE-2017-4028: SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

• Severity: medium (CVSS 4.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-03 · updated 2026-06-17
• Weakness: CWE-74

Description

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Affected products

• McAfee Anti-Virus Plus: all versions
• McAfee LLC McAfee Endpoint Security (ENS): 10.2
• McAfee, LLC McAfee Host Intrusion Prevention System (Host IPS) for Windows: through 8.0; 8.0-patch_1, 8.0-patch_2, 8.0-patch_3, 8.0-patch_4, 8.0-patch_5, 8.0-patch_6 (+3)
• McAfee Internet Security: all versions
• McAfee,LLC McAfee Total Protection (MTP): all versions
• McAfee Virus Scan Enterprise: through 8.8; 8.8-patch_9

References

• http://www.securityfocus.com/bid/97958
• https://kc.mcafee.com/corporate/index?page=content&id=SB10193
• http://www.securityfocus.com/bid/97958
• https://kc.mcafee.com/corporate/index?page=content&id=SB10193

Get alerted when CVE-2017-4028 or the next vulnerability affects your stack