Trend Micro OfficeScan XG vulnerabilities

2 CVEs affecting Trend Micro OfficeScan XG, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15364, published 2018-08-30.

More from Trend Micro.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-15364, published 2018-08-30. Medium severity, CVSS 4.7. EPSS: 2.1% chance of exploitation in the next 30 days. A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro OfficeScan XG (12.0) could allow a local attacker to disclose sensitive information on…
• CVE-2017-14088, published 2017-10-06. High severity, CVSS 7.0. EPSS: 0.7% chance of exploitation in the next 30 days. Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved…