mcafee application change control vulnerabilities

Latest mcafee application change control CVEs

Newest publication first

1. CVE-2018-6668 Bypass Application Control with simple DLL

   Published 2018-12-31

   High·CVSS 7.8 EPSS 0.43%

   A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell.

2. CVE-2018-6669 Bypass Application Control through an ASP.NET form

   Published 2018-12-20

   High·CVSS 8.0 EPSS 0.54%

   A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form.

3. CVE-2018-6690 McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

   Published 2018-09-18

   High·CVSS 7.1 EPSS 0.26%

   Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.