CVE-2020-7299: McAfee True Key

Medium severity, CVSS 4.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific situations.

Affected products

• McAfee True Key: before 6.2.109.2 (fixed in 6.2.109.2)

Published 2020-09-04. Last modified 2026-06-17.