PT-2020-17676

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions Agatti through SXR1130 Snapdragon Compute versions Agatti through SXR1130 Snapdragon Consumer IOT versions Agatti through SXR1130 Snapdragon Industrial IOT versions Agatti through SXR1130 Snapdragon Mobile versions...

PT-2020-12564

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions prior to the fixed version Qualcomm Snapdragon Compute versions prior to the fixed version Qualcomm Snapdragon Connectivity versions prior to the fixed version Qualcomm Snapdragon Consumer IOT versions prior t...

CVE-2020-3692: Buffer Copy without Checking Size of Input

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Agatti, Kamorta,...

California’s Prop 24 splits data privacy supporters

California’s data privacy house is divided. On the Golden State’s November ballot this year is the question as to whether to amend California’s barely-two-year-old data privacy law, the California Consumer Privacy Act. Far from the first attempt to change the fledgling law, Proposition 24 sets...

CVE-2020-27014

Trend Micro Antivirus for Mac 2020 (Consumer) is affected by a local race-condition vulnerability in the Web Threat Protection Blocklist. The flaw, exploitable by an attacker with high-privilege code execution, can trigger a kernel panic/crash (local privilege escalation via the KERedirect kext)....

CVE-2020-27015

CVE-2020-27015 affects Trend Micro Antivirus for Mac 2020 (Consumer). The flaw is an error message information disclosure in the KERedirect kext that can leak kernel pointers and debug messages to userland when an attacker already has high-privilege code execution locally. Exploitation is local a...

CVE-2020-27014: Time-of-check Time-of-use (TOCTOU) Race Condition

Trend Micro Antivirus for Mac 2020 Consumer contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the...

CVE-2020-27015: Generation of Error Message Containing Sensitive Information

Trend Micro Antivirus for Mac 2020 Consumer contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order...

Lock and Code S1Ep18: Finding consumer value in Cybersecurity Awareness Month with Jamie Court

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Jamie Court, president of the non-profit advocacy group Consumer Watchdog, about the consumer value in Cybersecurity Awareness Month. Launched initially ...

PT-2020-16593

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue is related to a race condition in the Web Threat Protection Blocklist component. If exploited, it could allow an attacker to cause a kernel panic or crash. To exploit this, an...

PT-2020-16594

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue allows kernel pointers and debug messages to leak to userland if exploited. An attacker must first obtain the ability to execute high-privileged code on the target system in ord...

CVE-2020-25778

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this...

CVE-2020-25777

CVE-2020-25777 affects Trend Micro Antivirus for Mac 2020 (Consumer). A vulnerability in the kernel extension request flow allows bypassing the product's Web Threat Protection. The exploit requires user interaction (visiting a malicious page or opening a malicious file). The specific flaw is desc...

PT-2020-16201

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue allows an attacker to bypass the Web Threat Protection feature through a specific kernel extension request attack. This requires user interaction, where the target must either...

PT-2020-16592

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue occurs due to improper access control in the product's webserver API, allowing an attacker to read and write sensitive product and user data. To exploit this, an attacker must...

PT-2020-16202

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue allows an attacker to leak several bytes of memory by supplying a kernel pointer, but the attacker must first obtain the ability to execute high-privileged code on the target...

CVE-2020-25778: Generation of Error Message Containing Sensitive Information

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this...

CVE-2020-27013: Undefined Security Weakness

Trend Micro Antivirus for Mac 2020 Consumer contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must...

CVE-2020-25777: Undefined Security Weakness

Trend Micro Antivirus for Mac 2020 Consumer is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope...

PT-2020-16203

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue allows an Internationalized Domain Name homograph attack, also known as a Puny-code attack, to be used for adding a malicious website to the list of approved websites. This can...