What’s Vulnerable › Vulnerabilities

CVE-2021-23892

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-12 · updated 2026-06-17
• Weakness: CWE-59

Description

By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrary code through insecure use of predictable temporary file locations.

Affected products

• McAfee,LLC McAfee Endpoint Security (ENS) for Linux: from 10.5.0 before 10.7.5 — fixed in 10.7.5

How to fix

Upgrade to a fixed version: McAfee,LLC McAfee Endpoint Security (ENS) for Linux 10.7.5. Check the vendor advisory for mitigations.

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10355
• https://kc.mcafee.com/corporate/index?page=content&id=SB10355

Get alerted when CVE-2021-23892 or the next vulnerability affects your stack