VULNERABILITY INTELLIGENCE
CVE-2019-19697
CVSS score6.7 MEDIUM
EPSS probability0.82%
CISA KEVNot currently listed
Published2020-01-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administrator privileges on the target machine in order to exploit the vulnerability.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- security@trendmicro.com — Exploit, Third Party Advisory
- security@trendmicro.com — Vendor Advisory
- security@trendmicro.com — Exploit, Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory