What’s Vulnerable › Vulnerabilities

CVE-2020-7273: Autorun registry bypass

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-15 · updated 2026-06-17
• Weakness: CWE-269

Description

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters.

Affected products

• McAfee LLC McAfee Endpoint Security (ENS): 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5 (+1)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10309
• https://kc.mcafee.com/corporate/index?page=content&id=SB10309

Get alerted when CVE-2020-7273 or the next vulnerability affects your stack