CVE-2017-4028: SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

Security readout for executives and security teams

CVE-2017-4028 is a McAfee-on-Windows issue where an administrator could manipulate registry parameters to inject arbitrary code into a debugged McAfee process. The business impact is mainly integrity risk to endpoint security software, but exploitation requires high privileges, high complexity, and user interaction. Exposure is limited to Windows systems running the listed affected McAfee versions: AVP, MIS, MTP 170329; ENS 10.2; Host IPS 8.0; and VSE 8.8. Systems without these products or versions are not evidenced as affected by the provided sources. Treat this as a targeted endpoint-security integrity issue, not a mass remote compromise signal. Prioritize confirmation and vendor-guided remediation on systems still running the affected McAfee versions, especially privileged administration workstations and security-sensitive servers. Mitigation focus: Identify Windows endpoints running the affected McAfee product versions.; Review McAfee SB10193 for vendor-approved fixes or mitigations.; Prioritize updates for systems where administrators use debugging tools or registry modification workflows..

Prepared

Jun 1, 2026, 04:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.