Junglewise Threat Intelligence

CVE-2021-23874: McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

CVE-2021-23874 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2021-11-03

Executive brief

McAfee Total Protection (MTP) prior to version 16.0.30 contains an improper privilege management vulnerability. A local attacker can exploit this to gain elevated privileges and execute arbitrary code, effectively bypassing the software's self-defense mechanisms.

Affected products

  • McAfee Total Protection (MTP) < 16.0.30

Timeline

  • 2021-02-10: disclosed
  • 2021-11-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog