McAfee,LLC McAfee Endpoint Security (ENS) for Windows

Name: McAfee,LLC McAfee Endpoint Security (ENS) for Windows
Brand: McAfee,LLC

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical2high2medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-7308US	medium6.5OT elevated	0.51% (43rd)	—	10.7.0 February 2021 Update	2021-04-15	unspecified → 10.7.0 February 2021 Update
CVE-2021-31843US	high7.8	0.31% (24th)	—	10.7.0 September 2021 Update	2021-09-17	unspecified → 10.7.0 September 2021 Update
CVE-2020-7264US	high8.4	0.26% (18th)	—	10.7.0 Hotfix 199847	2020-05-08	10.7.x → 10.7.0 Hotfix 199847
CVE-2021-31842US	medium5.5	0.23% (13th)	—	10.7.0 September 2021 Update	2021-09-17	unspecified → 10.7.0 September 2021 Update

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management1 CVEs
CWE-274Improper Handling of Insufficient Privileges1 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')1 CVEs
CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.