CVE-2020-7337

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.8 Patch 16

Description The issue allows local administrators to bypass local security protection through McAfee VirusScan Enterprise not correctly integrating with Windows Defender Application Control. This is achieved via careful manipulation of the Code Integrity checks.

Recommendations For versions prior to 8.8 Patch 16, update to 8.8 Patch 16 or later to resolve the issue. As a temporary workaround, consider restricting access to the Code Integrity checks until a patch is applied.