CVE search · CVE-2022-43751

CVE-2022-43751

high 7.8

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system privileges.

Open in the NVD CVE.org JSON

Status: Modified
Published: 2022-11-23
Last changed: 2026-06-17
Source: cve@mitre.org
Weakness: CWE-427

Severity

Version	Score	Vector	Source
CVSS 3.1	high 7.8	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`	nvd@nist.govPrimary
CVSS 3.1	high 7.8	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`	134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

mcafee · total_protection

References

https://mcafee.comProduct
https://www.mcafee.com/support/?articleId=TS103348&page=shell&shell=article-viewVendor Advisory
https://mcafee.comProduct
https://www.mcafee.com/support/?articleId=TS103348&page=shell&shell=article-viewVendor Advisory

CVE-2022-43751

Details

Severity

Affected products

References