CVE-2022-43751

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2022-11-23

Last modified

2025-04-29

Weaknesses

CWE-427

Affected products

• Total Protection (Mcafee)

References

• https://mcafee.com
• https://www.mcafee.com/support/?articleId=TS103348&page=shell&shell=article-view