CVE-2020-7279: DLL search order hijacking in Host IPS

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-10 · updated 2026-06-17
Weakness: CWE-426

Description

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder.

Affected products

McAfee, LLC McAfee Host Intrusion Prevention System (Host IPS) for Windows: 8.0.0, 8.0.0-p1, 8.0.0-p10, 8.0.0-p11, 8.0.0-p12, 8.0.0-p13 (+10)

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10320
https://kc.mcafee.com/corporate/index?page=content&id=SB10320

Get alerted when CVE-2020-7279 or the next vulnerability affects your stack