VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026

CVE-2020-7280

CVE-2020-7280

Description

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • McAfee/Virusscan Enterprise16 versions
    cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:*+ 15 more
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch10:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch11:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch12:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch13:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch14:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch1:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch2:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch3:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch4:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch5:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch6:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch7:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch8:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch9:*:*:*:windows:*:*
    • (no CPE)range: <8.8 Patch 15
  • McAfee, LLC/McAfee VirusScan Enterprise (VSE)v5
    Range: 8.8.x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.