CVE-2021-23874: high-severity vulnerability in McAfee Total Protection (MTP)
McAfee Total Protection (MTP) privilege escalation vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
McAfee Total Protection before version 16.0.30 has a flaw that allows someone with access to your computer to run programs with high-level permissions and bypass the software's own security protections. This is dangerous because an attacker could take complete control of your system.
A local privilege escalation vulnerability in McAfee Total Protection prior to 16.0.30 permits authenticated local users to execute arbitrary code with elevated privileges by circumventing the application's self-defense mechanisms. The vulnerability is exploitable via local access without requiring special conditions, resulting in complete system compromise.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.