CVE-2021-23892: McAfee Endpoint Security For Linux Threat Prevention

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrary code through insecure use of predictable temporary file locations.

Affected products

• McAfee Endpoint Security For Linux Threat Prevention: from 10.5.0, before 10.7.5 (fixed in 10.7.5)

Published 2021-05-12. Last modified 2026-06-17.