CVE-2021-31841
Last modified
CVE-2021-31841 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gaining elevated permissions and the ability to execute arbitrary code as the system user, through not checking the DLL signature.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gaining elevated permissions and the ability to execute arbitrary code as the system user, through not checking the DLL signature.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Mcafee Agent | < 5.7.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-31841?
How severe is CVE-2021-31841?
How do I fix CVE-2021-31841?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-31836Improper privilege management vulnerability in maconfig for …7.1
- CVE-2021-31837Memory corruption vulnerability in the driver file component…7.8
- CVE-2021-31838A command injection vulnerability in MVISION EDR (MVEDR) pri…9.1
- CVE-2021-31839Improper privilege management vulnerability in McAfee Agent …3.3
- CVE-2021-3184MISP 2.4.136 has XSS via a crafted URL to the app/View/Eleme…6.1
- CVE-2021-31840A vulnerability in the preloading mechanism of specific dyna…7.3
- CVE-2021-31842XML Entity Expansion injection vulnerability in McAfee Endpo…5.5
- CVE-2021-31843Improper privileges management vulnerability in McAfee Endpo…7.8
- CVE-2021-31844A buffer overflow vulnerability in McAfee Data Loss Preventi…7.3
- CVE-2021-31845A buffer overflow vulnerability in McAfee Data Loss Preventi…7.3
- CVE-2021-31847Improper access control vulnerability in the repair process …7.8
- CVE-2021-31848Cross site scripting (XSS) vulnerability in McAfee Data Loss…6.1
Are you affected by CVE-2021-31841?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST