CVE-2024-34405

CRITICAL
STIX 2.1 vulnerability

Record summary

CVE-2024-34405 has a selected CVSS score of 9.1 (critical).

Description

Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 12, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

antivirus_vpn_for_android

Browse mcafee / antivirus_vpn_for_android

Default status: unknown

CVE ListBefore 8.3.0affected

References

3