CVE-2022-43751: McAfee Total Protection

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system privileges.

Affected products

• McAfee Total Protection: before 16.0.49 (fixed in 16.0.49)

Published 2022-11-23. Last modified 2026-06-17.