CVE-2020-7323

6.9 mediumEPSS 0.3%

Medium (6.9) in mcafee endpoint security. EPSS 0.3% chance of exploitation in the next 30 days.

Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running with elevated privileges. This issue is timing dependent and requires physical access to the machine.

Severity

CVSS 3.1

6.9 medium

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2020-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:endpoint_security

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10327
https://kc.mcafee.com/corporate/index?page=content&id=SB10327

Check your stack JSON