Vulnerability Details CVE-2020-7335
Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only exploitable in a small time window.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 4.4
Products affected by CVE-2020-7335
-
cpe:2.3:a:mcafee:total_protection:-
-
cpe:2.3:a:mcafee:total_protection:16.0.18
-
cpe:2.3:a:mcafee:total_protection:4.0.161.1
-
cpe:2.3:a:mcafee:total_protection:4.0.176.1
-
cpe:2.3:a:mcafee:total_protection:4.6