Loading HuntDB...

GHSA-v35m-j976-rqv4

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to load DLLs of the attacker's choosing. This requires the creation and removal of junctions by the attacker along with sending a specific IOTL command at the correct time.

Related CVEs

Key Information

GHSA ID
GHSA-v35m-j976-rqv4
Published
May 24, 2022 5:45 PM
Last Modified
September 21, 2022 12:00 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 2, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.