CVE-2020-7312 HIGH

CVE-2020-7312: DLL Search Order Hijacking in MA for Windows

Vendor Mcafee Llc
Product MA for Windows
Weakness CWE-427
Published September 10, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.

Key dates

02Disclosure timeline

September 10, 2020 CVE published
September 17, 2024 Record updated