Vulnerability · Published Mar 10, 2022 · Assigned by trellix

CVE-2022-0280McAfee Total Protection (MTP) - File Deletion vulnerability

High 7.5

In plain English

A high-severity security flaw in McAfee Total Protection for Windows from McAfee. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.3%top 72.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of service. This attack exploits the way symlinks are created and how the product works with them.

Affected products (as reported)

Vendor	Product	Versions
McAfee	McAfee Total Protection for Windows	unspecified – through 16.0.42

Weakness: CWE-367 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

References

https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view x_refsource_MISC