CVE-2021-23873

Summary

CVE	CVE-2021-23873
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-02-10 11:15:00 UTC
Updated	2023-11-07 03:30:00 UTC
Description	Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a specific time.

Risk And Classification

Problem Types: CWE-59

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Mcafee	Total Protection	All	All	All	All
Application	Mcafee	Total Protection	All	All	All	All

References

Reference	Source	Link	Tags
service.mcafee.com/FAQDocument.aspx	CONFIRM	service.mcafee.com	Vendor Advisory
ZDI-21-175 \| Zero Day Initiative		www.zerodayinitiative.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

376452 McAfee Arbitrary Process Execution Vulnerability (TS103114)