Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Nov 17, 2021

High
CISA KEVEPSS 0.9%

CVE-2021-23874

McAfeeMcAfee Total Protection (MTP)

McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.

EPSS — Exploit Probability

0.9%

Higher than 74.7% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2021-23874

Vulnerability Overview

Severity
High
EPSS
0.9%
CISA KEV
Yes
Ransomware
Unknown
Published
Nov 3, 2021
KEV Added
Nov 3, 2021
Due Date
Nov 17, 2021
Related Articles
0

Vendor

McAfee

McAfee Total Protection (MTP)