CVE Feed

    Dashboard / CVE / CVE-2016-8008

    CVE-2016-8008

    Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system.

    Published:Mar 14, 2017
    Last Modified:Apr 20, 2025
    EPS:Mar 14, 2017
    EPSS Score:0.00044
    CVSS Score:8.8

    Affected Products

    Vendor
    Mcafee
    Product
    Security Scan Plus
    Vendor
    Microsoft
    Product
    Windows 10
    Vendor
    Microsoft
    Product
    Windows 7

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-37025 (CVSS 7.8) — An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allo…
    CVE-2017-3897 (CVSS 9.8) — A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versi…
    CVE-2015-8992 (CVSS 7) — Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attac…
    CVE-2015-8991 (CVSS 7) — Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows…
    CVE-2015-8993 (CVSS 7) — Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to…
    CVE-2016-8026 (CVSS 7.8) — Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earli…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High