Symbolic Link vulnerability during DAT update
Priority LOW 34CWE-269Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.
Summary
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.
Why it matters now
EPSS 0.004 34th percentileScored 2026-11-07
Fix Fixed McAfee VirusScan Enterprise (VSE) (McAfee, LLC): 8.8 Patch 15
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| McAfee | McAfee VirusScan Enterprise (VSE) | 8.8.x to before 8.8 Patch 15 | 8.8 Patch 15 | Patch available | CNA |
- McAfee VirusScan Enterprise (VSE) VendorMcAfee Affected 8.8.x to before 8.8 Patch 15 Fixed in 8.8 Patch 15 Patch available CNA
CPE configurations NVD · 15
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:* | 8.8 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch1:*:*:*:windows:*:* | 8.8 patch1 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch10:*:*:*:windows:*:* | 8.8 patch10 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch11:*:*:*:windows:*:* | 8.8 patch11 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch12:*:*:*:windows:*:* | 8.8 patch12 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch13:*:*:*:windows:*:* | 8.8 patch13 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch14:*:*:*:windows:*:* | 8.8 patch14 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch2:*:*:*:windows:*:* | 8.8 patch2 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch3:*:*:*:windows:*:* | 8.8 patch3 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch4:*:*:*:windows:*:* | 8.8 patch4 | Vulnerable | McAfee |
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:* Versions 8.8 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch1:*:*:*:windows:*:* Versions 8.8 patch1 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch10:*:*:*:windows:*:* Versions 8.8 patch10 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch11:*:*:*:windows:*:* Versions 8.8 patch11 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch12:*:*:*:windows:*:* Versions 8.8 patch12 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch13:*:*:*:windows:*:* Versions 8.8 patch13 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch14:*:*:*:windows:*:* Versions 8.8 patch14 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch2:*:*:*:windows:*:* Versions 8.8 patch2 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch3:*:*:*:windows:*:* Versions 8.8 patch3 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch4:*:*:*:windows:*:* Versions 8.8 patch4 Vulnerable ·McAfee
Show 5 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch5:*:*:*:windows:*:* | 8.8 patch5 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch6:*:*:*:windows:*:* | 8.8 patch6 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch7:*:*:*:windows:*:* | 8.8 patch7 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch8:*:*:*:windows:*:* | 8.8 patch8 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch9:*:*:*:windows:*:* | 8.8 patch9 | Vulnerable | McAfee |
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch5:*:*:*:windows:*:* Versions 8.8 patch5 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch6:*:*:*:windows:*:* Versions 8.8 patch6 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch7:*:*:*:windows:*:* Versions 8.8 patch7 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch8:*:*:*:windows:*:* Versions 8.8 patch8 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch9:*:*:*:windows:*:* Versions 8.8 patch9 Vulnerable ·McAfee
Remediation
- Fix · CNA McAfee VirusScan Enterprise (VSE) (McAfee, LLC) Fixed in 8.8 Patch 15
Timeline
- 2026-10-02 Threatist record created from CVE-2020-7280
- 2026-10-03 Alias added: GHSA-cpp4-9ggm-fr5x
References
More McAfee Virusscan Enterprise vulnerabilities
- TI-2016-06740 Improper authentication in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 7.5
- TI-2016-06738 Code injection in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.0
- TI-2016-06742 HTTP response splitting in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.1
- TI-2016-06741 Improper authentication in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.1
- TI-2009-04865 Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows… CVSS 2.0HIGH 9.3
- TI-2007-02073 Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch… CVSS 2.0HIGH 7.9
Sources
- CVE-2020-7280 · CVE Program
- CVE-2020-7280 · NVD
- FIRST EPSS
- GHSA-cpp4-9ggm-fr5x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences