McAfee Endpoint Security (ENS) 10.7.0 for Windows

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:endpoint_security:10.7.0:*:*:*:*:windows:*:*

part: a version: 10.7.0 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEndpoint Security (6d2736ea-e844-5073-bb4a-39b93e8822f2)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7264 vulnerable 2026-06-08 05:27:12.731035 Privilege Escalation vulnerability through symbolic links in ENS for Windows
HIGH (8.8)
Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
Published: 2020-05-08T11:45:14.046Z
Updated: 2024-09-17T02:57:21.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7263 vulnerable 2026-06-08 05:27:12.729144 ENS configuration can be edited by attacker with local administrator permissions
MEDIUM (6.5)
Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.
Published: 2020-04-01T06:40:13.222Z
Updated: 2024-09-16T23:05:21.599Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.