Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2016-8010: McAfee Application Control and Endpoint Security let local users bypass protection
CVE-2016-8010 · published 9 years ago
Summary
The Application Control (up to version 7.0) and Endpoint Security (up to version 10.2) can be tricked by a command-line tool, allowing anyone with local access to skip the software's security checks. This could let malicious programs run unchecked on a workstation. Apply the vendor's latest updates or patches to restore proper protection.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mcafee | application_control |
<= 7.0.0 cpe:2.3:a:mcafee:application_control:*:*:*:*:*:*:*:* |
| mcafee | endpoint_security |
<= 10.2 cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:* |
Original advisory text
Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to bypass local secur...
Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to bypass local security protection via a command-line utility.
References
- http://www.securityfocus.com/bid/94661 Third Party Advisory VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10179 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-284Improper Access Control
Timeline
Published14 Mar 2017
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-8010 · NVD
Track software like this
Free during beta