Medium severity6.1NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026

CVE-2019-3648

Description

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.

Affected products

McAfee/Anti Virus Plus
cpe:2.3:a:mcafee:anti-virus_plus:*:*:*:*:*:*:*:*
Range: <=16.0.r22
McAfee/Internet Security
cpe:2.3:a:mcafee:internet_security:*:*:*:*:*:*:*:*
Range: <=16.0.r22
McAfee/McAfee Total Protection2 versions
cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*range: <=16.0r22
- (no CPE)range: 16.0.x
McAfee/Total Protection 2010llm-fuzzy
Range: <=16.0.R22

Patches

Vulnerability mechanics

References

safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648nvd
service.mcafee.com/webcenter/portal/cp/home/articleviewnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000