Improper Deep Link Validation in McAfee Security Antivirus VPN for Android
CVE-2024-34405

Currently unrated

Key Information:

Vendor
McAfee
Status
Security: Antivirus VPN for Android
Vendor
CVE Published:
11 June 2024

Summary

A vulnerability in McAfee Security: Antivirus VPN for Android prior to version 8.3.0 exposes users to potential risks by allowing an attacker to execute arbitrary URLs within the app. This improper validation of deep links can lead to various security risks, including unauthorized access and manipulation of user data, making it crucial for users to update their applications promptly to the latest version.

References

https://www.mcafee.com/en-us/consumer-corporate/mcafee-la...
https://www.mcafee.com/support/?page=shell&shell=article-...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.