McAfee Application Control vulnerabilities

7 CVEs affecting McAfee Application Control, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-8010, published 2017-03-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1715, published 2016-01-12. Medium severity, CVSS 6.6. EPSS: 2.3% chance of exploitation in the next 30 days. The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit…
CVE-2014-9920, published 2017-03-14. Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days. Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1…
CVE-2012-4593, published 2012-08-22. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users…
CVE-2016-8009, published 2017-03-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code…
CVE-2013-7461, published 2017-03-14. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write…
CVE-2013-7460, published 2017-03-14. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part…
CVE-2016-8010, published 2017-03-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to bypass local…