CVE-2018-6664: Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before…

PriorityP343high8.8CVSS 3.0

AVNACLPRLUINSUCHIHAH

EPSS

0.71%

48.9th percentile

Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
mcafee	data_loss_prevention_endpoint	< 10.0.500	10.0.500
mcafee	data_loss_prevention_endpoint	< 11.0.400	11.0.400
mcafee	data_loss_prevention_endpoint	>= 10 < 10.0.500	10.0.500
mcafee	data_loss_prevention_endpoint	>= 11 < 11.0.400	11.0.400

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.