CVE-2021-23874

high · 8.2Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2021-11-17

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.

8.2

CVSS

1.0%

EPSS (exploit prob.)

62nd

EPSS percentile

2021-02-10

Published

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-269CWE-732

Affected products

Vendor	Product	Affected versions
mcafee	total_protection	< 16.0.30

Check a specific version with /api/v1/cve/match.

References

http://service.mcafee.com/FAQDocument.aspx?&id=TS103114
http://service.mcafee.com/FAQDocument.aspx?&id=TS103114
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-23874

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-23874