WID-SEC-W-2023-0631

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

McAfee Total Protection: Mehrere Schwachstellen

view advisory published 2023-03-13

Ein lokaler Angreifer kann mehrere Schwachstellen in McAfee Total Protection ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeizuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2023-24579USmedium5.5—
McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt.
CVE-2023-24578USmedium5.5—
McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized…
CVE-2023-24577USmedium5.5—
McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileg…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan