CVE-2015-3987: Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfe...

Security readout for executives and security teams

This CVE describes a local privilege escalation risk in McAfee ePO Deep Command. A user who already has local access to an affected Windows system may be able to gain higher privileges through unquoted search path behavior in Client Management or Gateway components. Exposure is likely limited to Windows hosts running McAfee ePO Deep Command 2.1 or 2.2 before HF 1058831, especially where local user access exists. Treat as a targeted remediation item, not an internet-wide emergency. The risk matters where affected endpoint-management components exist and local access is plausible, because successful abuse could increase attacker privileges. Mitigation focus: Inventory McAfee ePO Deep Command installations and versions.; Prioritize systems running versions 2.1 or 2.2 before HF 1058831.; Apply McAfee HF 1058831 or current vendor guidance..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.