CVE-2020-7315

MEDIUM

McAfee Agent < 5.6.6 - DLL Injection via Untrusted Search Path

Title source: llm
STIX 2.1

Description

DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL.

References (1)

Core 1
Core References

Scores

CVSS v3 6.0
EPSS 0.0010
EPSS Percentile 27.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-426
Status published
Products (1)
mcafee/mcafee_agent < 5.6.6
Published Sep 10, 2020
Tracked Since Feb 18, 2026