← Back

CVE-2019-14686

nvd nist
Published: Aug 21, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.

Affected (5)

Trendmicro
5 products
Antivirus + Security 2019
Internet Security 2019
Maximum Security 2019
Premium Security 2019
Ransom Buster
Configuration A
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Antivirus + Security 2019
Version 15.0
Internet Security 2019
Version 15.0
Maximum Security 2019
Version 15.0
Premium Security 2019
Version 15.0
Ransom Buster
Version 1.0
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

Source: security@trendmicro.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.