Trend Micro Endpoint Sensor vulnerabilities

3 CVEs affecting Trend Micro Endpoint Sensor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-14688, published 2020-02-20.

More from Trend Micro.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-6798, published 2017-03-10. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208.
• CVE-2019-14688, published 2020-02-20. High severity, CVSS 7.0. EPSS: 1.9% chance of exploitation in the next 30 days. Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a…
• CVE-2018-6218, published 2018-02-16. High severity, CVSS 7.0. EPSS: 1.6% chance of exploitation in the next 30 days. A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.