CVEvulnerability

CVE-2019-14686

7.8 HIGH Published 2019-08-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-08-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-427

Description

A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.

Affected configurations

• trendmicro antivirus \+ security 2019 15.0 • trendmicro internet security 2019 15.0 • trendmicro maximum security 2019 15.0 • trendmicro premium security 2019 15.0 • trendmicro ransom buster 1.0

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References