CVE-2021-23886

MEDIUM

Mcafee Data Loss Prevention Endpoint - Improper Exception Handling

Title source: rule

Description

Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlphook driver reading invalid memory.

References (2)

[Broken Link] https://kc.mcafee.com/corporate/index?page=content&id=SB10354

[Broken Link] https://kc.mcafee.com/corporate/index?page=content&id=SB10357

Scores

CVSS v3 5.5

EPSS 0.0004

EPSS Percentile 13.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-755

Status published

Affected Products (1)

mcafee/data_loss_prevention_endpoint < 11.6.100.41

Timeline

Published Apr 15, 2021

Tracked Since Feb 18, 2026