CVE-2020-7274

CVE-2020-7274 is a privilege escalation vulnerability in McTray.exe within McAfee Endpoint Security (ENS) for Windows prior to version 10.7.0 April 2020 Update. This flaw allows a local user to spawn unrelated processes with elevated privileges if a system administrator has previously granted McTray.exe elevated permissions. With a CVSS score of 7.8 (HIGH), this vulnerability has a low attack complexity and requires local user privileges, but can lead to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.