Design/Logic Flaw

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 v15 consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one...

CVE-2020-15604

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 v15 consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one...

PT-2020-14528

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 version 15 Description The issue is related to an incomplete SSL server certification validation, which could be exploited by an attacker in combination with another attack to trick the client into downloading a...

PT-2020-15735

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 version 15 Description The issue is related to an incomplete SSL server certification validation, which could be exploited by an attacker to trick an affected client into downloading a malicious update. This is due to...

CVE-2020-15604: Improper Certificate Validation

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 v15 consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one...

CVE-2020-24560: Improper Certificate Validation

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 v15 consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one...

CVE-2019-19694: Undefined Security Weakness

The Trend Micro Security 2019 15.0.0.1163 and below consumer family of products is vulnerable to a denial of service DoS attack in which a malicious actor could manipulate a key file at a certain time during the system startup process to disable the product's malware protection functions or the...

PT-2020-10221

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 versions 15.0.0.1163 and below Description The issue allows a malicious actor to manipulate a key file during system startup, potentially disabling the product's malware protection functions or the entire product. Thi...

PT-2020-10223

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 version 15 Description The issue allows an attacker to execute arbitrary code, potentially gaining elevated privileges and tampering with protected services by preventing them from starting. This can be achieved by...

CVE-2019-19697: Undefined Security Weakness

An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 v15 consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have...

CVE-2019-14685

A local privilege escalation vulnerability exists in Trend Micro Security 2019 v15.0 in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service...

CVE-2019-14685

A local privilege escalation vulnerability exists in Trend Micro Security 2019 v15.0 in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service...

CVE-2019-14685

CVE-2019-14685 describes a local privilege escalation in Trend Micro Security 2019 (v15.0) where an attacker could manipulate a specific product feature to load a malicious service. The available connected documents confirm the vulnerability class (local privilege escalation) and affected product...

PT-2019-13781

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 version 15.0 Description A local privilege escalation issue exists, allowing an attacker to manipulate a specific product feature to load a malicious service. Recommendations For Trend Micro Security 2019 version 15.0...

CVE-2019-14685: Unquoted Search Path or Element

A local privilege escalation vulnerability exists in Trend Micro Security 2019 v15.0 in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service...

PT-2019-9577

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 Consumer versions prior to 15.0.0.1163 Description A DLL hijacking issue could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations. Recommendations For versions prior to...

CVE-2018-18333: Untrusted Search Path

A DLL hijacking vulnerability in Trend Micro Security 2019 Consumer versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations...