Paper/Archive/CVE-2024-34405

CVE-2024-34405

mcafee antivirus_vpn_for_android — Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary U…

EPSS 0.5%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 40.9.409 × 208.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

antivirus_vpn_for_android< 8.3.08.3.0CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refmcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html refmcafee.com/support/?page=shell&shell=article-view&articleId=000002403