CVE-2018-6703

9.8 criticalEPSS 3.2%

Critical (9.8) in mcafee agent. EPSS 3.2% chance of exploitation in the next 30 days.

Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2018-12-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:agent

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10258
https://kc.mcafee.com/corporate/index?page=content&id=SB10258

Check your stack JSON