Trend Micro Premium Security 2019 vulnerabilities

7 CVEs affecting Trend Micro Premium Security 2019, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-24560, published 2020-09-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-24560, published 2020-09-24. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another…
CVE-2020-15604, published 2020-09-24. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another…
CVE-2019-14686, published 2019-08-21. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if…
CVE-2019-19697, published 2020-01-18. Medium severity, CVSS 6.7. EPSS: 0.8% chance of exploitation in the next 30 days. An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected…
CVE-2019-20357, published 2020-01-18. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to…
CVE-2019-14685, published 2019-08-21. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious…
CVE-2019-19694, published 2020-02-20. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (DoS) attack in which a malicious actor could manipulate a key file at a certain…