CVE-2020-7275

Summary

Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file.

Affected Software

VendorProductVersion RangeStatus
McAfee LLCMcAfee Endpoint Security (ENS)10.x < 10.7.0 April 2020 Updateaffected

Weaknesses

  • CWE-428: CWE-428 Unquoted Search Path or Element

ADP Enrichment

CVE Program Container

Additional References

References