← Back

CVE-2019-20357

nvd nist
Published: Jan 18, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.

Affected (8)

Trendmicro
8 products
Antivirus + Security 2019
Antivirus + Security 2020
Internet Security 2019
Internet Security 2020
Maximum Security 2019
Maximum Security 2020
Premium Security 2019
Premium Security 2020
Configuration A
8 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Antivirus + Security 2019
Version 15.0
Antivirus + Security 2020
Version 16.0
Internet Security 2019
Version 15.0
Internet Security 2020
Version 16.0
Maximum Security 2019
Version 15.0
Maximum Security 2020
Version 16.0
Premium Security 2019
Version 15.0
Premium Security 2020
Version 16.0
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-428
Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (6)

Source: security@trendmicro.com
ExploitThird Party Advisory
Source: security@trendmicro.com
Vendor Advisory
Source: security@trendmicro.com
ExploitIssue TrackingMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingMailing ListThird Party Advisory

Timeline

No history available yet.