CVEvulnerability

CVE-2021-25251

7.2 HIGH Published 2021-02-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-94

Description

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

Affected configurations

• trendmicro antivirus\+ security 2020 16.0 • trendmicro antivirus\+ security 2021 17.0 • trendmicro internet security 2020 16.0 • trendmicro internet security 2021 17.0 • trendmicro maximum security 2020 16.0 • trendmicro maximum security 2021 17.0 • trendmicro premium security 2020 16.0 • trendmicro premium security 2021 17.0

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References