CVE-2020-7331

—

CVSS 3.1

7.8 high

EPSS

<1%p35

Published

Nov 12, 2020 (Nov 12, 2020)

Modified

Jun 17, 2026

Description

Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

Vendors: mcafee
Products: endpoint security
Weakness: CWE-428
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.