CVE-2020-7335

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.29

Description The issue is related to a lack of proper access control in McAfee Total Protection, allowing local users to elevate their privileges. This can be achieved through careful manipulation of a folder by creating a junction link, exploiting a timing issue that lacks protection. The exploitation window for this issue is small.

Recommendations For versions prior to 16.0.29, update to version 16.0.29 or later to resolve the issue. As a temporary workaround, consider restricting access to the folder that can be manipulated to create a junction link, to minimize the risk of exploitation.