CVE-2009-0686: Trend Micro Internet Security

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \Device\tmactmon that overwrites memory.

Affected products

• Trend Micro Internet Security: version 2008 only; version 2009 only

Published 2009-04-01. Last modified 2026-06-16.