CVE-2020-7266

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise (VSE) for Windows versions prior to 8.8 Patch 14 Hotfix 116778

Description The issue allows local users to delete files they would otherwise not have access to by manipulating symbolic links. This manipulation redirects a McAfee delete action to an unintended file, which can be achieved by running a malicious script or program on the target machine.

Recommendations For McAfee VirusScan Enterprise (VSE) for Windows versions prior to 8.8 Patch 14 Hotfix 116778, update to version 8.8 Patch 14 Hotfix 116778 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.