CVE-2019-3646: McAfee Total Protection - Free Antivirus Trial: DLL Search Order Hijacking vulnerability

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-09-13 · updated 2026-06-17
Weakness: CWE-714

Description

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights.

Affected products

McAfee,LLC McAfee Total Protection (MTP): through 16.0.r18

References

http://service.mcafee.com/FAQDocument.aspx?&id=TS102968
http://service.mcafee.com/FAQDocument.aspx?&id=TS102968

Get alerted when CVE-2019-3646 or the next vulnerability affects your stack