CVE-2016-4534

The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix...

3.0 LowPublic exploit

CVE-2016-4534 is a low vulnerability (CVSS 3.0) in Mcafee Virusscan Enterprise, published May 5, 2016. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.27%, the 83rd percentile. No source names a fixed version.

The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: Low

Exploit likelihood

2.27%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 3.0

Record: CVE-2016-4534
CVSS 3.0: 3.0 LowCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L
CVSS 2.0: 3.0 LowAV:L/AC:M/Au:S/C:N/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2016-4534
Updated: 2026-11-02

EUVDEUVD-2016-5521 No score

Record: EUVD-2016-5521
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h9qj-3623-mvm2 3.0

The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix...

Record: GHSA-h9qj-3623-mvm2
CVSS 3.0: 3.0 LowCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	McAfee VirusScan Enterprise 8.8 - Security Restrictions Bypass	2016-03-07

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD