CVE-2016-8008

HIGH 8.8CVE-2016-8008 · Published 14/03/2017 · updated 17/06/2026

In short

CVE-2016-8008 is a HIGH (CVSS 8.8) vulnerability affecting security scan plus (mcafee).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 30.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
security scan plus mcafee	`≤ 3.11.376`	No fix yet

Description

Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system.

References

service.mcafee.com/webcenter/portal/cp/home/articleview · Vendor Advisory

More vulnerabilities in security scan plus

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free