CVE-2022-0129

MEDIUM 6.7CVE-2022-0129 · Published 11/01/2022 · updated 17/06/2026

In short

CVE-2022-0129 is a MEDIUM (CVSS 6.7) vulnerability affecting techcheck (mcafee).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.5% of all vulnerabilities.
Fix: update to 4.0.0.2 or later.

Package	Affected versions	Patched versions
techcheck mcafee	`< 4.0.0.2`	`4.0.0.2`

Description

Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory that the process was run from.

References

service.mcafee.com

More vulnerabilities in techcheck

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free