CVE-2021-23873
HIGHMcAfee Total Protection < 16.0.30 - Privilege Escalation and Arbitrary File Deletion via Junction Link Manipulation
Title source: llmDescription
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a specific time.
References (2)
Core 2
Core References
Various Sources x_refsource_confirm
http://service.mcafee.com/FAQDocument.aspx?&id=TS103114
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-175/
Scores
CVSS v3
7.8
EPSS
0.0003
EPSS Percentile
10.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-59
Status
published
Products (1)
mcafee/total_protection
< 16.0.30
Published
Feb 10, 2021
Tracked Since
Feb 18, 2026