Read the docs
TI-2022-00212 Aliases CVE-2022-0280GHSA-55vp-4grv-f6mg

McAfee Total Protection (MTP) - File Deletion vulnerability

Priority LOW 33CWE-367Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of service. This attack exploits the way symlinks are created and how the product works with them.

Why it matters now

EPSS 0.00337 27th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeMcAfee Total Protection for Windowsup to 16.0.42—No fix listedCNA
  • McAfee Total Protection for Windows VendorMcAfee Affected up to 16.0.42 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*before 16.0.43Running onMcAfee
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
  • cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:* Versions before 16.0.43 Running on ·McAfee
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-0280
  2. 2026-10-03 Alias added: GHSA-55vp-4grv-f6mg

References

Advisory 1

  • TI-2021-06229 McAfee Total Protection (MTP) privilege escalation vulnerability KEVCVSS 3.1HIGH 8.2
  • TI-2021-02242 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer… KEVCVSS 3.1HIGH 7.8
  • TI-2024-16664 SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter. CVSS 3.1CRITICAL 9.8
  • TI-2020-10912 Infinite loop in Apache Tomcat CVSS 3.1HIGH 7.5
  • TI-2006-04972 Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot… CVSS 2.0HIGH 10.0
  • TI-2019-06950 Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a… CVSS 3.1HIGH 7.5
See all 602 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences