Skip to content
OpenAdvisories
High · 7.5 CVE-2020-7335 EUVD-2020-28462GHSA-9mm6-26v4-pgr2

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Published Dec 1, 2020 · Updated Aug 4, 2024 · Assigned by trellix

Description

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only exploitable in a small time window.

Affected products

VendorProductAffectedFixed
McAfee,LLC McAfee Total Protection (MTP) unspecified – ≤ 16.0.29 —

References