PT-2019-15915

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One and OfficeScan XG affected versions not specified Description A vulnerability could allow an attacker to expose a masked credential key by manipulating page elements using development tools. The attacker must already have...

CVE-2019-19693: Improper Link Resolution Before File Access

The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to disclose sensitive information or to create a denial-of-service condition on affected installations. An attacker must first obtain the ability to execute low-privileged code on...

CVE-2019-19691: Undefined Security Weakness

A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability...

CVE-2019-19692: Improper Neutralization of Input During Web Page Generation

Trend Micro Apex One 2019 is affected by a cross-site scripting XSS vulnerability on the product console. Note that the Japanese version of the product is NOT affected...

Trend Micro Maximum Security Link Resolution Information Disclosure And Denial-of-Service Vulnerability

This vulnerability allows local attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

Trend Micro Maximum Security Information Disclosure Vulnerability

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. An information disclosure vulnerability exists in Trend Micro Security 2020, which can be exploited by a local attacker to obtain sensitive information or cause a denial of service...

Multiple Trend Micro Products CVE-2019-19693 Local Security Bypass Vulnerability

Description Multiple Trend Micro Products are prone to a local security-bypass vulnerability. Attackers can exploit this issue to obtain sensitive information, bypass security restrictions and perform unauthorized actions or cause denial-of-service conditions. Technologies Affected Trend Micro...

Trend Micro Apex One and OfficeScan CVE-2019-19691 Information Disclosure Vulnerability

Description Trend Micro Apex One and OfficeScan are prone to an information-disclosure vulnerability. Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks. The following products are affected: Trend Micro Apex One 2019 Trend Micro OfficeScan XG...

PT-2019-15917

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2020 Description The issue allows a local attacker to disclose sensitive information or create a denial-of-service condition on affected installations. To exploit this, an attacker must first obtain the ability to execute...

Trend Micro Apex Central CVE-2019-19692 Cross Site Scripting Vulnerability

Description Trend Micro Apex Central is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Thi...

CVE-2019-19689

Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses...

CVE-2019-19689

Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses...

CVE-2019-19688

A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited allowing an attacker to place a malicious DLL file into the application directory and elevate privileges...

CVE-2019-19690

Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature...

CVE-2019-19690

Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature...

CVE-2019-19688

A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited allowing an attacker to place a malicious DLL file into the application directory and elevate privileges...

Design/Logic Flaw

Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses...

Privilege escalation

A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited allowing an attacker to place a malicious DLL file into the application directory and elevate privileges...

CVE-2019-19690

CVE-2019-19690 affects Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and earlier on Android 8.0+. The vulnerability enables bypass of the product’s App Password Protection feature. Details on root cause, affected files/components, exploit steps, or concrete remediation are no...

CVE-2019-19689

Trend Micro HouseCall for Home Networks is affected by a DLL hijacking vulnerability associated with the packer used by the product. Affected versions are below 5.3.0.1063. The issue enables local exploitation through hijacking a DLL loading path, per the CVE-2019-19689 entries in NVD and related...