CVE-2020-7337: McAfee Virusscan Enterprise

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of the Code Integrity checks.

Affected products

• McAfee Virusscan Enterprise: before 8.8 (fixed in 8.8); version 8.8 only

Published 2020-12-09. Last modified 2026-06-17.