Search/CVE-2019-3621
● CVE — Medium

CVE-2019-3621

VendormcafeeProductdata loss prevention endpointDiscoveredJul 25, 2019UpdatedNov 21, 2024

Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.

CVSS v3.1
6.8 MEDIUM
EPSS
0.35%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 23, 2026
● 0.00pp
0.35% → 0.35% over 9 tracked changes
CVSS v3.1 Detail
Attack VectorPHYSICAL
Attack ComplexityHIGH
Privileges RequiredHIGH
User InteractionREQUIRED
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Connections
1 relationships
Timeline
disclosure → media coverage
Jul 25, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024