ZeroHour

CVE-2020-7335

CVSS 3.1
7.8 high
EPSS
<1%p37
Published
()
Modified
Description

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only exploitable in a small time window.

Vendors
mcafee
Products
total protection
Weakness
CWE-269
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.