CVE-2020-7331: McAfee Endpoint Security

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

Affected products

• McAfee Endpoint Security: before 10.6.1 (fixed in 10.6.1)

Published 2020-11-12. Last modified 2026-06-17.