CVE-2023-24577

McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2023-03-13

Last modified

2025-03-03

Weaknesses

CWE-59

Affected products

• Total Protection (Mcafee)

References

• https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html
• https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view