CVE-2021-23874

KEV

McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

Vendor / Project: McAfee
Product: McAfee Total Protection (MTP)
Date added: Nov 3, 2021
Due date: Nov 17, 2021
Known ransomware use: Unknown
CWEs: CWE-284

Description

McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-23874