High severity8.2NVD Advisory· Published Jul 27, 2022· Updated Jun 17, 2026

CVE-2022-2313

Description

A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed.

Affected products

McAfee/Agent
cpe:2.3:a:mcafee:agent:*:*:*:*:*:windows:*:*
Range: <5.7.7
Trellix/MA Smart Installerllm-fuzzy
Range: <5.7.7
Trellix/Agentcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

kcm.trellix.com/corporate/indexnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000