Total Protection vulnerabilitiesAnd the versions its exploited flaws hit.
Total Protection is made by Mcafee. We track 27 published vulnerabilities listed under that exact name, across 13 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 3 November 2021. Mcafee lists newer releases under their own names, such as Total Protection 2010, so check those pages too.
The most recent Total Protection flaw added to the known-exploited list is CVE-2021-23874, on 3 November 2021. We keep watching the known-exploited list.
Is Total Protection listed under other names? Yes.
Mcafee also lists Total Protection under more specific names, such as Total Protection 2010 and Total Protection for Endpoint. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which versions of Total Protection do the exploited flaws hit?
Each exploited flaw lists the versions it affects, usually as ranges. "before 16.0.30" means every version up to, but not including, 16.0.30. Find your version, then patch.
- CVE-2021-23874Exploited list, 3 Nov 2021
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
before 16.0.30
Which Total Protection vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.2McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.
Which Total Protection flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 2.8%CVE-2009-1348High
The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and...
- 1.5%CVE-2019-3646Medium
DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a...
- 1.4%CVE-2019-3587Medium
DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder.
- 1.0%
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.
- 0.7%CVE-2019-3648Medium
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific...
- 0.7%CVE-2021-23873Medium
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial...
- 0.6%CVE-2020-7283High
Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to.
- 0.5%CVE-2017-4028Medium
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via...
- 0.4%CVE-2020-7335High
Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction...
- 0.4%CVE-2021-23876High
Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of...
Running Total Protection? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.
- Matched to
- Total Protection on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 27 published vulnerabilities listed under the name Total Protection, across 13 versions. The most recent Total Protection flaw added to the known-exploited list is CVE-2021-23874, on 3 November 2021.
1 is on the list of flaws known to be exploited. The most recently added is CVE-2021-23874.
Mcafee also lists Total Protection under more specific names, such as Total Protection 2010 and Total Protection for Endpoint. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Each flaw names its own versions, usually as ranges. The newest, CVE-2021-23874, affects before 16.0.30. The versions for every exploited flaw are listed on this page.
Create a Precursor Intelligence account and track Total Protection. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.