Read the docs
TI-2021-06230 Aliases CVE-2021-23876GHSA-cvgp-h469-9f24

McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability

Priority LOW 34CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware.

Why it matters now

EPSS 0.00435 38th percentileScored 2026-11-07
Fix Fixed McAfee Total Protection (MTP) (McAfee,LLC): 16.0.30

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeMcAfee Total Protection (MTP)before 16.0.3016.0.30Patch availableCNA
  • McAfee Total Protection (MTP) VendorMcAfee Affected before 16.0.30 Fixed in 16.0.30 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*before 16.0.30VulnerableMcAfee
  • cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:* Versions before 16.0.30 Vulnerable ·McAfee

Remediation

  • Fix · CNA McAfee Total Protection (MTP) (McAfee,LLC) Fixed in 16.0.30

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    McAfee,LLC McAfee Total Protection (MTP) 16.0.30

    3 records Highest priority Priority CRITICAL 1 CRITICAL, 2 LOW

    Other records, highest priority first

    • TI-2021-06229 McAfee Total Protection (MTP) privilege escalation vulnerabilityPriority CRITICAL 95
    • TI-2021-06228 McAfee Total Protection (MTP) privilege escalation vulnerabilityPriority LOW 35
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-23876
  2. 2026-10-03 Alias added: GHSA-cvgp-h469-9f24

References

Advisory 1

  • TI-2021-06229 McAfee Total Protection (MTP) privilege escalation vulnerability KEVCVSS 3.1HIGH 8.2
  • TI-2020-05888 Improper privilege management in McAfee Total Protection CVSS 3.1HIGH 8.8
  • TI-2020-05933 Improper privilege management in McAfee Total Protection Trial CVSS 3.1HIGH 8.8
  • TI-2009-01282 The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security… CVSS 2.0HIGH 7.6
  • TI-2022-21485 McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path… CVSS 3.1HIGH 7.8
  • TI-2020-05903 Total Protection (MTP) - Unexpected behavior violation CVSS 3.1HIGH 8.4
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences