CVE-2022-43751 - McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user

Back Back to CVE browser

HIGH

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user

Published Nov 22, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.23%

Description

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (2)

https://mcafee.com
Product
https://www.mcafee.com/support/?articleId=TS103348&page=shell&shell=article-view
Vendor Advisory

Link	Providers	Tags
https://mcafee.com		Product
https://www.mcafee.com/support/?articleId=TS103348&page=shell&shell=article-view		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 22, 2022

Updated Apr 29, 2025

Reserved Oct 26, 2022

Link CVE-2022-43751

CISA Vulnrichment

Updated Apr 29, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-43751

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-43751