CVE-2020-7283: Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-03 · updated 2026-06-17
Weakness: CWE-274

Description

Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine.

Affected products

McAfee,LLC McAfee Total Protection (MTP): before 16.0.r26 — fixed in 16.0.r26

How to fix

Upgrade to a fixed version: McAfee,LLC McAfee Total Protection (MTP) 16.0.r26. Check the vendor advisory for mitigations.

References

https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062

Get alerted when CVE-2020-7283 or the next vulnerability affects your stack