high8.2Known exploited
CVE-2021-23874
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2021-11-17.
Apply updates per vendor instructions.
Impact
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Total Protection | before 16.0.30 |