Lucene search
+L

284 matches found

Cvelist
Cvelist
•added 2021/02/10 10:20 a.m.•31 views

CVE-2021-23873 McAfee Total Protection (MTP) privilege escalation vulnerability

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

7.8CVSS7.9AI score0.00654EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/10 12:00 a.m.•4 views

CVE-2021-23873: Improper Link Resolution Before File Access

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

7.8CVSS6AI score0.00654EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•18 views

迈克菲 McAfee Total Protection 访问控制错误漏洞

McAfee Total Protection MTP is a one-stop security suite. A privilege mismanagement vulnerability exists in McAfee Total Protection versions prior to 16.0.30. The vulnerability can be exploited to cause a denial of service by an attacker to elevate privileges and make arbitrary file changes with...

7.8CVSS7.2AI score0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•20 views

迈克菲 McAfee Total Protection 后置链接漏洞

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection prior to version 16.0.30. A local attacker can exploit this vulnerability to elevate privileges and perform arbitrary file deletions with SYSTEM user privileges, whi...

7.8CVSS6.5AI score0.00654EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/02/10 12:00 a.m.•32 views

CVE-2021-23874

Arbitrary Process Execution vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

8.2CVSS7.9AI score0.01026EPSS
SaveIn wildExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•43 views

McAfee Total Protection Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of McAfee Total Protection. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS4.1AI score0.00654EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•20 views

迈克菲 McAfee Total Protection 权限许可和访问控制问题漏洞

McAfee Total Protection MTP is a one-stop security suite. An arbitrary process execution vulnerability exists in McAfee Total Protection versions prior to 16.0.30. An attacker could exploit this vulnerability to bypass the MTP self-defense by elevating privileges and executing arbitrary code...

8.2CVSS7.3AI score0.01026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/10 12:00 a.m.•3 views

CVE-2021-23876: Improper Privilege Management

Bypass Remote Procedure call in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware...

7.8CVSS5.9AI score0.0043EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/10 12:00 a.m.•3 views

CVE-2021-23874: Improper Privilege Management

Arbitrary Process Execution vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense...

8.2CVSS6.4AI score0.01026EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/02/09 12:00 a.m.•8 views

PT-2021-4992 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.30 Description: The issue is related to improper privilege management, allowing a local user to gain elevated privileges and execute arbitrary code, bypassing self-defense mechanisms. This can be...

8.2CVSS7.4AI score0.01026EPSS
SaveExploits0References10
CNVD
CNVD
•added 2020/12/02 12:00 a.m.•26 views

McAfee Total Protection Elevation of Privilege Vulnerability

McAfee Total Protection is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection versions prior to 16.0.29. An attacker can exploit the elevation of privilege vulnerability by creating a junction link to manipulate a folder...

7.8CVSS6.8AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/01 9:15 a.m.•12 views

CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.8CVSS7.1AI score0.00434EPSS
SaveExploits0References2
NVD
NVD
•added 2020/12/01 9:15 a.m.•25 views

CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.8CVSS7.5AI score0.00434EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/12/01 9:15 a.m.•9 views

CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.8CVSS7.1AI score0.00434EPSS
SaveExploits0References3
Prion
Prion
•added 2020/12/01 9:15 a.m.•21 views

Privilege escalation

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

4.4CVSS7.5AI score0.00434EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/12/01 8:50 a.m.•36 views

CVE-2020-7335 Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.5CVSS7.6AI score0.00434EPSS
SaveExploits0References2
CVE
CVE
•added 2020/12/01 8:50 a.m.•75 views

CVE-2020-7335

CVE-2020-7335 affects McAfee Total Protection for Windows prior to 16.0.29. The flaw is a local privilege escalation via manipulation of a folder using a junction link, exploiting a timing-related protection gap. Impact is elevated privileges (local user) with full system access in some vectors; ...

7.8CVSS7.5AI score0.00434EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2020/12/01 12:00 a.m.•42 views

McAfee Total Protection Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of McAfee Total Protection. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

7CVSS4.2AI score0.00434EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/01 12:00 a.m.•4 views

CVE-2020-7335: Improper Privilege Management

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.8CVSS5.8AI score0.00434EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/10/20 12:00 a.m.•21 views

McAfee Total Protection elevation of privilege vulnerability (CNVD-2020-64597)

McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. An elevation of privilege vulnerability exists in McAfee Total Protection versions prior to 4.0.176.1, which originates from allowing a local user to schedule a task that invokes malware to execute with...

8.8CVSS7AI score0.0027EPSS
SaveExploits0References1
Rows per page
Query Builder