Trend Micro Antivirus+ Security 2020 vulnerabilities

6 CVEs affecting Trend Micro Antivirus+ Security 2020, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-25251, published 2021-02-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-18190, published 2019-12-09. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible…
CVE-2021-25251, published 2021-02-10. High severity, CVSS 7.2. EPSS: 2.6% chance of exploitation in the next 30 days. The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and…
CVE-2019-19693, published 2019-12-20. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to disclose sensitive information or to create a denial-of-service condition on…
CVE-2020-27697, published 2020-11-18. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges (symlink…
CVE-2020-27696, published 2020-11-18. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory which can lead to obtaining…
CVE-2020-27695, published 2020-11-18. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory which can lead to obtaining…