CVE-2019-3587

6.5 mediumEPSS 1.4%

Medium (6.5) in mcafee total protection. EPSS 1.4% chance of exploitation in the next 30 days.

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2019-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:total_protection

References

http://service.mcafee.com/FAQDocument.aspx?&id=TS102887
http://service.mcafee.com/FAQDocument.aspx?&id=TS102887

Check your stack JSON