CVE-2020-7281: Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have…

PriorityP427medium6.3CVSS 3.1

AVLACHPRLUINSUCNIHAH

EPSS

0.25%

15.9th percentile

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
mcafee	total_protection	< 16.0.r26	16.0.r26
mcafee_llc	mcafee_total_protection	—	—

CVSS provenance

nvdv3.16.3MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

nvdv2.01.9LOWAV:L/AC:M/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.