McAfee Total Protection Windows Client CVE-2019-3636 Local Security Bypass Vulnerability

Description

McAfee Total Protection Windows client is prone to a local security-bypass vulnerability. Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. Versions prior to McAfee Total Protection 16.0.R22 are vulnerable.

Technologies Affected

• McAfee Total Protection 16.0.R17
• McAfee Total Protection 16.0.R18
• McAfee Total Protection 16.0.R20
• McAfee Total Protection 16.0.R21

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Allow only trusted individuals to have user accounts and local access to the resources.

Updates are available. Please see the references or vendor advisory for more information.