Privilege Escalation Vulnerability in McAfee Total Protection
CVE-2023-24577

5.5MEDIUM

Key Information:

Vendor

Mcafee
Status
Total Protection
Vendor
CVE Published:
13 March 2023

What is CVE-2023-24577?

McAfee Total Protection versions below 16.0.50 are susceptible to a privilege escalation vulnerability caused by improper link resolution through registry keys. This flaw allows attackers to elevate their user privileges, potentially letting individuals with restricted access carry out unauthorized actions. Users of affected versions should prioritize updating their software to safeguard against such risks, ensuring the integrity and security of their systems.

References

https://www.mcafee.com/en-us/consumer-corporate/mcafee-la...
https://www.mcafee.com/support/?articleId=TS103397&page=s...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-24577 : Privilege Escalation Vulnerability in McAfee Total Protection