CVE-2022-0166

CVE-2022-0166 is a high-severity privilege escalation vulnerability affecting McAfee Agent versions prior to 5.7.5. A low-privileged user could exploit this flaw by manipulating the openssl.cnf file path to execute arbitrary code with SYSTEM privileges. The vulnerability has a CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability with low attack complexity. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage.