VULNERABILITY INTELLIGENCE

CVE-2020-7279

CVSS score4.6 MEDIUM
EPSS probability0.42%
CISA KEVNot currently listed
Published2020-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:N

Description

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder.

Weakness classification

  • trellixpsirt@trellix.com: CWE-426
  • nvd@nist.gov: CWE-426

Primary references