CVE-2020-7334: Improper privilege assignment vulnerability in the installer component of MACC

Severity: high (CVSS 8.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-10-15 · updated 2026-06-17
Weakness: CWE-266

Description

Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation/uninstallation of software.

Affected products

McAfee Application Control and Change Control (MACC): before 8.3.2 — fixed in 8.3.2

How to fix

Upgrade to a fixed version: McAfee Application Control and Change Control (MACC) 8.3.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-7334 or the next vulnerability affects your stack