Trend Micro Maximum Security 2019 vulnerabilities

8 CVEs affecting Trend Micro Maximum Security 2019, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-36744, published 2021-09-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-24560, published 2020-09-24. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another…
CVE-2020-15604, published 2020-09-24. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another…
CVE-2019-14686, published 2019-08-21. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if…
CVE-2019-19697, published 2020-01-18. Medium severity, CVSS 6.7. EPSS: 0.8% chance of exploitation in the next 30 days. An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected…
CVE-2019-20357, published 2020-01-18. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to…
CVE-2019-14685, published 2019-08-21. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious…
CVE-2021-36744, published 2021-09-06. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of…
CVE-2019-19694, published 2020-02-20. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (DoS) attack in which a malicious actor could manipulate a key file at a certain…