VULNERABILITY INTELLIGENCE

CVE-2019-14686

CVSS score7.8 HIGH
EPSS probability1.20%
CISA KEVNot currently listed
Published2019-08-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.

Weakness classification

  • CWE-427: Uncontrolled Search Path Element

Primary references