CVE-2020-25778

Published: Oct 14, 2020Modified: Jun 17, 2026

6.0

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Exploitability: 1.5 / Impact: 4.0

Source: NVD

Description

Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.

Affected (2)

Products: Trendmicro: Antivirus

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Trendmicro Antivirus	Version 2019
Trendmicro Antivirus	Version 2020

Related CWEs

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (4)

https://helpcenter.trendmicro.com/en-us/article/TMKA-09948

Source: security@trendmicro.com

PatchVendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-20-1241/

Source: security@trendmicro.com

Third Party AdvisoryVDB Entry

https://helpcenter.trendmicro.com/en-us/article/TMKA-09948

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-20-1241/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.