What’s Vulnerable › Vulnerabilities

CVE-2020-7277: McAfee processes not protected

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-15 · updated 2026-06-17
• Weakness: CWE-693

Description

Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS processes, reducing the protection offered.

Affected products

• McAfee LLC McAfee Endpoint Security (ENS): 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5 (+1)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10309
• https://kc.mcafee.com/corporate/index?page=content&id=SB10309

Get alerted when CVE-2020-7277 or the next vulnerability affects your stack