CVE-2021-23874 HIGH

CVE-2021-23874: McAfee Total Protection (MTP) privilege escalation vulnerability

Vendor Mcafee,Llc
Product McAfee Total Protection (MTP)
Weakness CWE-269
KEV Status Known Exploited
Published February 10, 2021
Last update October 21, 2025
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.

CISA mandated remediation

02CISA Required Action

Apply updates per vendor instructions.

Key dates

03Disclosure timeline

February 10, 2021 CVE published
October 21, 2025 Record updated