Application And Change Control
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee:application_and_change_control:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mcafee (b3716737-1d68-5e90-9de7-ce927cce9af4) |
|---|---|
| Product | Application And Change Control (725d7ea7-344c-55b7-8f11-53f682e950c7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-0221 |
vulnerable | 2026-06-08 05:52:04.549131 |
Details available
MEDIUM (4.4)
Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.
Published: 2023-01-13T15:19:03.662Z
Updated: 2025-04-04T14:49:27.402Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31833 |
vulnerable | 2026-06-08 05:31:53.987663 |
Details available
HIGH (7.1)
Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by MACC. This would require the attacker to rename the specified binary to match name of any configured updater and perform a specific set of steps, resulting in the renamed binary to be to run.
Published: 2022-01-04T09:45:12.000Z
Updated: 2024-08-03T23:10:30.836Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7334 |
vulnerable | 2026-06-08 05:27:12.871706 |
Improper privilege assignment vulnerability in the installer component of MACC
HIGH (7.7)
Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation/uninstallation of software.
Published: 2020-10-15T09:05:17.539Z
Updated: 2024-09-16T22:45:11.642Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7309 |
vulnerable | 2026-06-08 05:27:12.840464 |
Cross Site Scripting vulnerability in ePO extension of MACC
LOW (3.9)
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.
Published: 2020-08-26T06:00:19.835Z
Updated: 2024-09-16T17:03:22.066Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7260 |
vulnerable | 2026-06-08 05:27:12.722815 |
MACC installer DLL side loading
HIGH (7.3)
DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder.
Published: 2020-03-26T10:55:14.038Z
Updated: 2024-09-17T02:51:46.073Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6669 |
vulnerable | 2026-06-08 05:11:54.100598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6668 |
vulnerable | 2026-06-08 05:11:54.099695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.