What’s Vulnerable › Vulnerabilities
CVE-2022-0129: DLL Highjack vulnerability in McAfee TechCheck utility
- Severity: medium (CVSS 6.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-01-11 · updated 2026-06-17
- Weakness: CWE-427
Description
Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory that the process was run from.
Affected products
- McAfee,LLC McAfee TechCheck: before 4.0.0.2 — fixed in 4.0.0.2
How to fix
Upgrade to a fixed version: McAfee,LLC McAfee TechCheck 4.0.0.2. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2022-0129 or the next vulnerability affects your stack