CVE-2019-3593: Exploitation of Privilege/Trust vulnerability

Severity: high (CVSS 7.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-01-28 · updated 2026-06-17

Description

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware.

Affected products

McAfee,LLC McAfee Total Protection (MTP): before 16.0.r18 — fixed in 16.0.r18

How to fix

Upgrade to a fixed version: McAfee,LLC McAfee Total Protection (MTP) 16.0.r18. Check the vendor advisory for mitigations.

References

http://service.mcafee.com/FAQDocument.aspx?&id=TS102888
http://service.mcafee.com/FAQDocument.aspx?&id=TS102888

Get alerted when CVE-2019-3593 or the next vulnerability affects your stack