CVE-2019-18190: Trend Micro Antivirus+ Security 2020

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances.

Affected products

• Trend Micro Antivirus+ Security 2020: from 16.0, before 16.0.1227 (fixed in 16.0.1227)
• Trend Micro Internet Security 2020: from 16.0, before 16.0.1227 (fixed in 16.0.1227)
• Trend Micro Maximum Security 2020: from 16.0, before 16.0.1227 (fixed in 16.0.1227)
• Trend Micro Premium Security 2020: from 16.0, before 16.0.1227 (fixed in 16.0.1227)

Published 2019-12-09. Last modified 2026-06-17.