← CVE Intelligence

CVE-2020-7274

ENS elevated permissions vulnerability PUBLISHED

Description (CNA)

Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges).

Affected (CNA)

Vendor / productVersions
McAfee LLC / McAfee Endpoint Security (ENS)affected 10.x before 10.7.0 April 2020 Update

CWE

CWE-269

References

ADP enrichment

CVE

No English description supplied.