McAfee credits Lockheed Martin Red Team for responsibly reporting this flaw.

Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and ...

Authentication Protection Bypass vulnerability in ENS for Windows

Privilege Escalation vulnerability in McAfee DXL for Mac

Unquoted service executable path in McAfee Endpoint Security (ENS)