CVE detail
CVE-2021-23874 — McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
Published 2021-11-03 · Modified 2021-11-03 · Source kev
HIGH
severity
CVSS-derived band
0.0103
EPSS probability
exploitation probability, 30d
60.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2021-11-17
⚠ Actively exploited in the wild — CISA KEV listed 2021-11-03, federal remediation due 2021-11-17.
Description
McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References