VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-7274

CVE-2020-7274

Description

Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).

Affected products

9
  • McAfee/Endpoint Security7 versions
    cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*+ 6 more
    • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
  • McAfee/Endpoint Security (ENS) for Windowsllm-fuzzy
    Range: <10.7.0 April 2020 Update
  • McAfee LLC/McAfee Endpoint Security (ENS)v5
    Range: 10.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.