ZDI-CAN-24269: ZDI-24-1517: McAfee Total Protection Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of McAfee Total Protection. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.7. The following CVEs are assigned: CVE-2024-49592.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-24269?
The severity of ZDI-CAN-24269 is significant as it allows local attackers to escalate privileges.
How do I fix ZDI-CAN-24269?
To fix ZDI-CAN-24269, ensure you apply the latest security patches provided by McAfee for Total Protection.
Who is affected by ZDI-CAN-24269?
ZDI-CAN-24269 affects installations of McAfee Total Protection.
What type of attacks can ZDI-CAN-24269 facilitate?
ZDI-CAN-24269 can facilitate local privilege escalation attacks.
What must an attacker do to exploit ZDI-CAN-24269?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-CAN-24269.