What’s Vulnerable › Vulnerabilities

CVE-2018-6756: True Key (TK) Windows Client - Authentication Abuse vulnerability

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-06 · updated 2026-06-17

Description

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.

Affected products

• McAfee True Key: through 5.1.230.7

References

• http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
• https://www.exploit-db.com/exploits/45961/
• http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
• https://www.exploit-db.com/exploits/45961/

Get alerted when CVE-2018-6756 or the next vulnerability affects your stack