Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed, fingerprinting of the system leading to targeted scams, and not triggering the malicious software if McAfee software is detected.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-0815
• https://service.mcafee.com/?articleId=TS103273&page=shell&shell=article-view