CVE-2018-6668 MEDIUM

CVE-2018-6668: Bypass Application Control with simple DLL

Vendor Mcafee
Product Application and Change Control
Published December 31, 2018
Last update May 6, 2025
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

What the vulnerability does

01Description

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell.

Key dates

02Disclosure timeline

December 31, 2018 CVE published
May 6, 2025 Record updated