What’s Vulnerable › Vulnerabilities

CVE-2019-3621: DLP Endpoint Windows lock screen bypass with physical access

• Severity: medium (CVSS 6.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-25 · updated 2026-06-17

Description

Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.

Affected products

• McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows: from 11.0 before 11.1.200; from 11.2.000 before 11.3.0 — fixed in 11.1.200, 11.3.0

How to fix

Upgrade to a fixed version: McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows 11.1.200, 11.3.0. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/109370
• https://kc.mcafee.com/corporate/index?page=content&id=SB10290
• http://www.securityfocus.com/bid/109370
• https://kc.mcafee.com/corporate/index?page=content&id=SB10290

Get alerted when CVE-2019-3621 or the next vulnerability affects your stack