CVE-2014-9641: Trend Micro Tmeext.sys

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.

Affected products

• Trend Micro Tmeext.sys: up to and including 2.0.0.1014

Published 2015-02-06. Last modified 2026-06-17.