What is CVE-2021-23876?

CVE-2021-23876 is a high-severity vulnerability in Mcafee Total_protection, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2021-02-10.

How severe is CVE-2021-23876?

High severity. CVSS v3 base score is 7.8 out of 10.

Privilege escalation in Mcafee Total_protection

CVE-2021-23876

Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing c…

Vulnerability class: Privilege Escalation

EPSS: 0.004 (34.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Mcafee Total_protection
Mcafee,llc Mcafee Total Protection (Mtp) — versions unspecified

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

trellixpsirt@trellix.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-23876?: CVE-2021-23876 is a high-severity vulnerability in Mcafee Total_protection, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2021-02-10.
How severe is CVE-2021-23876?: High severity. CVSS v3 base score is 7.8 out of 10.