CVE-2020-7274: 
Trellix Endpoint Security Agent vulnerability analysis and mitigation

CVE-2020-7274 is a security vulnerability in McAfee Endpoint Security for Windows that allows local users to spawn unrelated processes with elevated privileges when the system administrator grants McTray.exe permissions. The vulnerability was disclosed and published on April 15, 2020 (NVD).

The vulnerability is classified as CWE-269, which relates to improper privilege management. It received a CVSS score of 7.7, indicating a high severity level (Wiz Blog).

When exploited, this vulnerability enables local users to execute programs with elevated privileges, potentially leading to unauthorized access and system compromise. The high-privilege nature of endpoint security agents makes this vulnerability particularly concerning as it could be leveraged for privilege escalation attacks (Wiz Blog).