CVE-2024-49592
- EPSS 0.03%
- Veröffentlicht 15.11.2024 21:15:11
- Zuletzt bearbeitet 27.11.2024 17:15:12
Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable user" and the type of attack ...
CVE-2023-25134
- EPSS 0.04%
- Veröffentlicht 21.03.2023 18:15:12
- Zuletzt bearbeitet 28.02.2025 22:15:37
McAfee Total Protection prior to 16.0.50 may allow an adversary (with full administrative access) to modify a McAfee specific Component Object Model (COM) in the Windows Registry. This can result in the loading of a malicious payload.
CVE-2023-24579
- EPSS 0.04%
- Veröffentlicht 13.03.2023 13:15:11
- Zuletzt bearbeitet 03.03.2025 20:15:37
McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt.
CVE-2023-24578
- EPSS 0.03%
- Veröffentlicht 13.03.2023 13:15:11
- Zuletzt bearbeitet 27.02.2025 21:15:18
McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks.
CVE-2023-24577
- EPSS 0.09%
- Veröffentlicht 13.03.2023 13:15:11
- Zuletzt bearbeitet 03.03.2025 20:15:37
McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks.
CVE-2022-43751
- EPSS 0.09%
- Veröffentlicht 23.11.2022 00:15:11
- Zuletzt bearbeitet 29.04.2025 05:15:45
McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileg...
CVE-2021-23877
- EPSS 0.03%
- Veröffentlicht 26.10.2021 22:15:08
- Zuletzt bearbeitet 21.11.2024 05:51:59
Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection (MTP) prior to 16.0.34_x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installatio...
CVE-2021-23891
- EPSS 0.04%
- Veröffentlicht 12.05.2021 09:15:07
- Zuletzt bearbeitet 21.11.2024 05:52:00
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense.
CVE-2021-23872
- EPSS 0.04%
- Veröffentlicht 12.05.2021 09:15:07
- Zuletzt bearbeitet 21.11.2024 05:51:58
Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface.
CVE-2021-23876
- EPSS 0.03%
- Veröffentlicht 10.02.2021 11:15:13
- Zuletzt bearbeitet 21.11.2024 05:51:59
Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully co...