CVE-2018-6707: McAfee Agent Insecure usage of temporary files vulnerability

Severity: high (CVSS 7.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-12-14 · updated 2026-06-17
Weakness: CWE-400

Description

Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to cause DoS, unexpected behavior, or potentially unauthorized code execution via knowledge of the internal trust mechanism.

Affected products

McAfee,LLC McAfee Agent for Windows: from 5.0.0 through 5.0.6; 5.5.0, 5.5.1

References

http://www.securityfocus.com/bid/106307
https://kc.mcafee.com/corporate/index?page=content&id=SB10260
http://www.securityfocus.com/bid/106307
https://kc.mcafee.com/corporate/index?page=content&id=SB10260

Get alerted when CVE-2018-6707 or the next vulnerability affects your stack