Description
Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kc.mcafee.com/corporate/index?page=content&id=SB10309
Scores
CVSS v3
4.8
EPSS
0.0012
EPSS Percentile
30.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Details
CWE
CWE-428
Status
published
Products (7)
mcafee/endpoint_security
10.5.0
mcafee/endpoint_security
10.5.1
mcafee/endpoint_security
10.5.2
mcafee/endpoint_security
10.5.3
mcafee/endpoint_security
10.5.4
mcafee/endpoint_security
10.5.5
mcafee/endpoint_security
10.6.0
Published
Apr 15, 2020
Tracked Since
Feb 18, 2026