CVE-2020-7286CWE-274

Privilege Escalation vulnerability in EDR for Windows

High · published May 8, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weakness
CWE-274 · Improper Handling of Insufficient Privileges
Published
2020-05-08T12:35Z
EPSS history
Timeline
  • 08 MAY 12:35Z
    Privilege Escalation vulnerability in EDR for Windows
    cvelistv5