CVE-2020-7298: Total Protection (MTP) - Unexpected behavior violation

Severity: high (CVSS 8.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-08-05 · updated 2026-06-17

Description

Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call.

Affected products

McAfee,LLC McAfee Total Protection (MTP): before 16.0.r26 — fixed in 16.0.r26

How to fix

Upgrade to a fixed version: McAfee,LLC McAfee Total Protection (MTP) 16.0.r26. Check the vendor advisory for mitigations.

References

https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062

Get alerted when CVE-2020-7298 or the next vulnerability affects your stack