VYPR
← All advisories
High severity8.8NVD Advisory· Published May 8, 2020· Updated Jun 17, 2026

CVE-2020-7264

CVE-2020-7264

Description

Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

Affected products

5
  • McAfee/Endpoint Security4 versions
    cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*+ 3 more
    • cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*range: >=10.5.0,<10.5.5
    • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.7.0:*:*:*:*:windows:*:*
    • (no CPE)range: 10.7.x
  • McAfee/Endpoint Security (ENS) for Windowsllm-fuzzy
    Range: <10.7.0 Hotfix 199847

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.