Trend Micro Antivirus vulnerabilities

12 CVEs affecting Trend Micro Antivirus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-24671, published 2022-02-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-19695, published 2019-12-24. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below) could potentially allow an attacker to create a symbolic link to a target file and modify it.
CVE-2020-25777, published 2020-10-14. Medium severity, CVSS 5.4. EPSS: 1.3% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User…
CVE-2020-27015, published 2020-10-30. Medium severity, CVSS 4.4. EPSS: 0.9% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An…
CVE-2020-25779, published 2020-10-13. Low severity, CVSS 3.3. EPSS: 0.8% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) could be used to add a malicious website to the approved…
CVE-2020-25776, published 2020-10-02. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a critical file on the system to escalate their privileges.…
CVE-2020-25778, published 2020-10-14. Medium severity, CVSS 6.0. EPSS: 0.6% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must…
CVE-2021-28648, published 2021-04-22. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection…
CVE-2021-25227, published 2021-02-04. Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanning functionality within the application. Please note: an…
CVE-2020-27013, published 2020-10-14. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and…
CVE-2022-24671, published 2022-02-24. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a local attacker to modify a file during the update process and escalate their…

Latest

CVE-2021-43771, published 2021-11-30. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead…
CVE-2020-27014, published 2020-10-30. Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days. Trend Micro Antivirus for Mac 2020 (Consumer) contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel…