CVE-2020-25778

CVE-2020-25778 affects Trend Micro Antivirus for Mac 2020 (Consumer). The issue is in a kernel extension (KERedirect kext) where an attacker who can run high-privileged code locally can supply a kernel pointer to leak memory and disclose sensitive information. ZDI notes the flaw enables local dis...

CVE-2020-27013

Trend Micro Antivirus for Mac 2020 (Consumer) exposes an API via a local webserver for which an API with read/write properties can be accessed by a local, low-privilege attacker who has already compromised the target. The vulnerability arises from improper access control on the iCoreService endpo...

CVE-2020-25778

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this...

CVE-2020-27013

Trend Micro Antivirus for Mac 2020 Consumer contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must...

CVE-2020-25777

CVE-2020-25777 affects Trend Micro Antivirus for Mac 2020 (Consumer). A vulnerability in the kernel extension request flow allows bypassing the product's Web Threat Protection. The exploit requires user interaction (visiting a malicious page or opening a malicious file). The specific flaw is desc...

CVE-2020-25777

Trend Micro Antivirus for Mac 2020 Consumer is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope...

CVE-2020-25778: Generation of Error Message Containing Sensitive Information

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this...

PT-2020-16201

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue allows an attacker to bypass the Web Threat Protection feature through a specific kernel extension request attack. This requires user interaction, where the target must either...

Trend Micro Antivirus for Mac Protection Bypass Vulnerability

This vulnerability allows remote attackers to bypass web filtering on affected installations of Trend Micro Antivirus for Mac. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2020-16592

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue occurs due to improper access control in the product's webserver API, allowing an attacker to read and write sensitive product and user data. To exploit this, an attacker must...

CVE-2020-27013: Undefined Security Weakness

Trend Micro Antivirus for Mac 2020 Consumer contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must...

CVE-2020-25777: Undefined Security Weakness

Trend Micro Antivirus for Mac 2020 Consumer is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope...

PT-2020-16202

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue allows an attacker to leak several bytes of memory by supplying a kernel pointer, but the attacker must first obtain the ability to execute high-privileged code on the target...

Trend Micro Antivirus for Mac Improper Access Control Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Microsoft Patch Tuesday, October 2020 Edition

Its Cybersecurity Awareness Month! In keeping with that theme, if you abuse Microsoft Windows computers you should be aware the company shipped a bevy of software updates today to fix at least 87 security problems in Windows and programs that run on top of the operating system. That means its onc...

CVE-2020-25779

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in which a Internationalized Domain Name homograph attack Puny-code could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature...

CVE-2020-25779

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in which a Internationalized Domain Name homograph attack Puny-code could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature...

Design/Logic Flaw

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in which a Internationalized Domain Name homograph attack Puny-code could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature...

CVE-2020-25779

CVE-2020-25779 affects Trend Micro Antivirus for Mac 2020 (Consumer); a Internationalized Domain Name homograph (Puny-code) vulnerability could allow adding a malicious site to the approved websites list, bypassing web threat protection. Root cause: IDN homograph misuse. Exploitation details and ...

CVE-2020-25779

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in which a Internationalized Domain Name homograph attack Puny-code could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature...