{"api_version":"1","generated_at":"2026-07-23T19:43:12+00:00","cve":"CVE-2016-8009","urls":{"html":"https://cve.report/CVE-2016-8009","api":"https://cve.report/api/cve/CVE-2016-8009.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-8009","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-8009"},"summary":{"title":"CVE-2016-8009","description":"Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call.","state":"PUBLISHED","assigner":"intel","published_at":"2017-03-14 22:59:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-264","Privilege escalation vulnerability"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"7.8","severity":"HIGH","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.6","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10175","name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10175","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"McAfee Corporate KB - McAfee Security Bulletin: Application Control update fixes a privilege escalation vulnerability (CVE-2016-8009) SB10175","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8009","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8009","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Intel","product":"McAfee Application Control (MAC)","version":"affected 7.0 and 6.x versions","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"8009","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"application_control","cpe6":"6.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"8009","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"application_control","cpe6":"6.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"8009","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"application_control","cpe6":"6.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"8009","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"application_control","cpe6":"6.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"8009","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"application_control","cpe6":"6.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"8009","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"application_control","cpe6":"6.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"8009","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"application_control","cpe6":"7.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T02:13:21.762Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10175"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"McAfee Application Control (MAC)","vendor":"Intel","versions":[{"status":"affected","version":"7.0 and 6.x versions"}]}],"datePublic":"2016-11-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call."}],"problemTypes":[{"descriptions":[{"description":"Privilege escalation vulnerability","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-03-14T21:57:01.000Z","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","shortName":"intel"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10175"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@intel.com","ID":"CVE-2016-8009","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"McAfee Application Control (MAC)","version":{"version_data":[{"version_value":"7.0 and 6.x versions"}]}}]},"vendor_name":"Intel"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Privilege escalation vulnerability"}]}]},"references":{"reference_data":[{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10175","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10175"}]}}}},"cveMetadata":{"assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","assignerShortName":"intel","cveId":"CVE-2016-8009","datePublished":"2017-03-14T22:00:00.000Z","dateReserved":"2016-09-09T00:00:00.000Z","dateUpdated":"2024-08-06T02:13:21.762Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-03-14 22:59:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-264","Privilege escalation vulnerability"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E9C4E2-83FC-4408-85DB-AB5035A3DDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC98A2C-2971-4DE1-8AB3-A8082DA604A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5749D867-B568-4063-928E-6BC89DA45C82"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"46648D73-F96C-4A75-A9CB-92B2501A9055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FEDD14FC-0CAA-445F-B29A-F82FB92393E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A76C99C1-C854-426C-AF4D-F2E965ECD9FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:application_control:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8922F935-AE83-4938-8B95-6BF6CA833724"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"8009","Ordinal":"1","Title":"CVE-2016-8009","CVE":"CVE-2016-8009","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"8009","Ordinal":"1","NoteData":"Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call.","Type":"Description","Title":"CVE-2016-8009"},{"CveYear":"2016","CveId":"8009","Ordinal":"2","NoteData":"2017-03-14","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"8009","Ordinal":"3","NoteData":"2017-03-14","Type":"Other","Title":"Modified"}]}}}