CVE-2020-7335CWE-269

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

High · published December 1, 2020

CVSS v3.1
7.5
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only exploitable in a small time window.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-12-01T08:50Z
EPSS history
Timeline
  • 01 DEC 08:50Z
    Privilege Escalation vulnerability in McAfee Total Protection (MTP)
    cvelistv5