CVE-2020-7312CWE-427

DLL Search Order Hijacking in MA for Windows

High · published September 10, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2020-09-10T09:45Z
EPSS history
Timeline
  • 10 SEP 09:45Z
    DLL Search Order Hijacking in MA for Windows
    cvelistv5