VYPR
Medium severity6.1NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-7261

CVE-2020-7261

Description

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input.

Affected products

9
  • McAfee LLC/McAfee Endpoint Security (ENS)v5
    Range: 10.x
  • McAfee/Endpoint Securityllm-fuzzy8 versions
    <10.7.0 February 2020 Update+ 7 more
    • (no CPE)range: <10.7.0 February 2020 Update
    • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.