CVE-2022-0129

6.7 mediumEPSS 0.3%

Medium (6.7) in mcafee techcheck. EPSS 0.3% chance of exploitation in the next 30 days.

Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory that the process was run from.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2022-01-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:techcheck

References

https://service.mcafee.com/?articleId=TS103243
https://service.mcafee.com/?articleId=TS103243

Check your stack JSON