CVE

CVE-2023-25134

Date: (C)2023-03-23   (M)2023-11-10

McAfee Total Protection prior to 16.0.50 may allow an adversary (with full administrative access) to modify a McAfee specific Component Object Model (COM) in the Windows Registry. This can result in the loading of a malicious payload.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:		CVSS V2 Severity:
CVSS Score : 6.7		CVSS Score :
Exploit Score: 0.8		Exploit Score:
Impact Score: 5.9		Impact Score:
CVSS V3 Metrics:		CVSS V2 Metrics:
Attack Vector: LOCAL		Access Vector:
Attack Complexity: LOW		Access Complexity:
Privileges Required: HIGH		Authentication:
User Interaction: NONE		Confidentiality:
Scope: UNCHANGED		Integrity:
Confidentiality: HIGH		Availability:
Integrity: HIGH
Availability: HIGH

Reference:

https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html

https://www.mcafee.com/support/?articleId=TS103398&page=shell&shell=article-view