McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2021-23874 · Published 10/02/2021 · updated 17/06/2026

McAfee Total Protection (MTP) Improper Privilege Management Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.

In short

CVE-2021-23874 is a HIGH (CVSS 7.8) vulnerability affecting total protection (mcafee).
Exploited in the wild: CISA added it to the KEV catalog on 03/11/2021.
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.6% of all vulnerabilities.
Fix: update to 16.0.30 or later.

Package	Affected versions	Patched versions
total protection mcafee	`< 16.0.30`	`16.0.30`

Description

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.

References

service.mcafee.com/FAQDocument.aspx · Broken Link
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2021-23874

More vulnerabilities in total protection

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

total protection

mcafee

< 16.0.30

16.0.30

More vulnerabilities in total protection

See all →