CVE-2020-7259

Summary

Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file

Affected Software

VendorProductVersion RangeStatus
McAfee LLCMcAfee Endpoint Security (ENS)10.x < 10.7.0 April 2020 Updateaffected

Weaknesses

  • CWE-264: CWE-264 Permissions, Privileges, and Access Controls

ADP Enrichment

CVE Program Container

Additional References

References