Read the docs
TI-2021-11827 Aliases CVE-2021-31833GHSA-vm64-pmpq-wg92

Improper privilege management in McAfee Application and Change Control

Priority LOW 34CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-269.

Summary

Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by MACC. This would require the attacker to rename the specified binary to match name of any configured updater and perform a specific set of steps, resulting in the renamed binary to be to run.

Why it matters now

EPSS 0.00259 17th percentileScored 2026-11-07
Fix Fixed McAfee Application and Change Control (MACC) (McAfee,LLC): 8.3.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeMcAfee Application and Change Control (MACC)before 8.3.48.3.4Patch availableCNA
  • McAfee Application and Change Control (MACC) VendorMcAfee Affected before 8.3.4 Fixed in 8.3.4 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:application_and_change_control:*:*:*:*:*:*:*:*before 8.3.4VulnerableMcAfee
  • cpe:2.3:a:mcafee:application_and_change_control:*:*:*:*:*:*:*:* Versions before 8.3.4 Vulnerable ·McAfee

Remediation

  • Fix · CNA McAfee Application and Change Control (MACC) (McAfee,LLC) Fixed in 8.3.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-31833
  2. 2026-10-03 Alias added: GHSA-vm64-pmpq-wg92

References

Other 1

  • TI-2020-05937 Improper privilege assignment vulnerability in the installer component of MACC CVSS 3.1HIGH 8.2
  • TI-2020-05867 MACC installer DLL side loading CVSS 3.1HIGH 7.8
  • TI-2017-02997 Improper authentication in McAfee Application Control and Change Control CVSS 3.0HIGH 7.8
  • TI-2020-05914 Cross Site Scripting vulnerability in ePO extension of MACC CVSS 3.1MEDIUM 4.8
  • TI-2023-00213 Improper privilege management in Trellix Application and Change Control CVSS 3.1MEDIUM 4.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences