CVE-2020-7260: MACC installer DLL side loading

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-03-26 · updated 2026-06-17
Weakness: CWE-264

Description

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder.

Affected products

McAfee Application Control and Change Control (MACC): before 8.3.0 — fixed in 8.3.0

How to fix

Upgrade to a fixed version: McAfee Application Control and Change Control (MACC) 8.3.0. Check the vendor advisory for mitigations.

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10313
https://kc.mcafee.com/corporate/index?page=content&id=SB10313

Get alerted when CVE-2020-7260 or the next vulnerability affects your stack