What’s Vulnerable › Vulnerabilities

CVE-2020-7275: Unquoted service paths for some McAfee ENS files

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-15 · updated 2026-06-17
• Weakness: CWE-428

Description

Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file.

Affected products

• McAfee LLC McAfee Endpoint Security (ENS): 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5 (+1)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10309
• https://kc.mcafee.com/corporate/index?page=content&id=SB10309

Get alerted when CVE-2020-7275 or the next vulnerability affects your stack