CVE-2020-7259: Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules
Published Apr 15, 2020
·Updated
Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file
Affected Software
7 affected components
McAfee Endpoint Security Windows=10.5.0
McAfee Endpoint Security Windows=10.5.1
McAfee Endpoint Security Windows=10.5.2
McAfee Endpoint Security Windows=10.5.3
McAfee Endpoint Security Windows=10.5.4
McAfee Endpoint Security Windows=10.5.5
McAfee Endpoint Security Windows=10.6.0
Event History
Apr 15, 2020
CVE Published
via MITRE·11:55 AM
Data Sourced
via MITRE·11:55 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-7259?
CVE-2020-7259 is a Privilege/Trust vulnerability in McAfee Endpoint Security (ENS) prior to version 10.7.0 February 2020 Update.
2
How does CVE-2020-7259 impact McAfee Endpoint Security?
CVE-2020-7259 allows local users to bypass local security protection via a carefully crafted input file.
3
What is the severity of CVE-2020-7259?
CVE-2020-7259 has a severity rating of 7.8 (High).
4
Which versions of McAfee Endpoint Security are affected by CVE-2020-7259?
McAfee Endpoint Security versions 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5, and 10.6.0 are affected by CVE-2020-7259.
5
How can I fix CVE-2020-7259?
To fix CVE-2020-7259, update McAfee Endpoint Security to version 10.7.0 February 2020 Update or later.