CVE-2019-3667

MEDIUM

McAfee Tech Check < 3.0.0.17 - DLL Search Order Hijacking

Title source: llm
STIX 2.1

Description

DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker.

References (1)

Core 1

Scores

CVSS v3 6.6
EPSS 0.0010
EPSS Percentile 27.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L

Details

CWE
CWE-427
Status published
Products (1)
mcafee/techcheck < 3.0.0.17
Published Dec 11, 2019
Tracked Since Feb 18, 2026