Read the docs
TI-2020-05943 Aliases CVE-2020-7346GHSA-v35m-j976-rqv4

Privilege escalation in McAfee DLP Endpoint for Windows

Priority LOW 34CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to load DLLs of the attacker's choosing. This requires the creation and removal of junctions by the attacker along with sending a specific IOTL command at the correct time.

Why it matters now

EPSS 0.00353 29th percentileScored 2026-11-07
Fix Fixed McAfee Data Loss Prevention (DLP) Endpoint for Windows (McAfee,LLC): 11.6.100

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeMcAfee Data Loss Prevention (DLP) Endpoint for Windowsbefore 11.6.10011.6.100Patch availableCNA
  • McAfee Data Loss Prevention (DLP) Endpoint for Windows VendorMcAfee Affected before 11.6.100 Fixed in 11.6.100 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:windows:*:*before 11.6.100VulnerableMcAfee
  • cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:windows:*:* Versions before 11.6.100 Vulnerable ·McAfee

Remediation

  • Fix · CNA McAfee Data Loss Prevention (DLP) Endpoint for Windows (McAfee,LLC) Fixed in 11.6.100

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7346
  2. 2026-10-03 Alias added: GHSA-v35m-j976-rqv4

References

Other 1

  • TI-2021-02968 Blind SQL injection in DLP ePO extension CVSS 3.1HIGH 8.4
  • TI-2020-05909 DLP ePO extension - Cross-site request forgery CVSS 3.1HIGH 7.6
  • TI-2020-05910 DLP ePO extension - Privilege escalation CVSS 3.1MEDIUM 6.7
  • TI-2020-05907 DLP ePO extension - Unrestricted Upload of File with Dangerous Type CVSS 3.1MEDIUM 6.4
  • TI-2020-05905 DLP ePO extension - Improper Authorization CVSS 3.1MEDIUM 6.3
  • TI-2019-02683 Data Loss Prevention - Unprotected Transport of Credentials CVSS 3.1MEDIUM 6.5
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences