CVE-2021-23893

HIGH

McAfee Drive Encryption < 7.3.0 - Privilege Escalation via Unutilized Memory Buffer

Title source: llm
STIX 2.1

Description

Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an unutilized memory buffer.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0003
EPSS Percentile 7.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-269
Status published
Products (2)
mcafee/drive_encryption 7.3.0
mcafee/drive_encryption < 7.3.0
Published Oct 01, 2021
Tracked Since Feb 18, 2026