Mcafee, LLC Endpoint Security For Windows vulnerabilities
6 vulnerabilities
Known vulnerabilities in Mcafee, LLC Endpoint Security For Windows, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-7322mcafee, llcendpoint security for windows+1
EPSS score0.25%
Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.CVE-2020-7320mcafee, llcendpoint security for windows+1EPSS score0.26%
Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services.CVE-2020-7323mcafee, llcendpoint security for windows+1EPSS score0.33%
Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running with elevated privileges. This issue is timing dependent and requires physical access to the machine.CVE-2020-7319mcafee, llcendpoint security for windows+1EPSS score0.39%
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.CVE-2020-7332mcafee, llcendpoint security for windows+1EPSS score0.59%
Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to incorrect security configuration.CVE-2020-7333mcafee, llcendpoint security for windows+1EPSS score0.52%
Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard.