CVE-2019-18190

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.7%
top 27.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Trendmicro Antivirus\+ Security 2020Trendmicro Internet Security 2020Trendmicro Maximum Security 2020+2 more
Timeline
PublishedDec 9
Latest updateMay 24

Description

Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages5 packages

▶NVDtrendmicro/maximum_security_202016.0 — 16.0.1227
▶NVDtrendmicro/premium_security_202016.0 — 16.0.1227
▶NVDtrendmicro/internet_security_202016.0 — 16.0.1227
▶NVDtrendmicro/antivirus\+_security_202016.0 — 16.0.1227
▶CVEListV5trend_micro/trend_micro_security_(consumer)2020 (Version 16.x)

🔴Vulnerability Details

2
GHSA
GHSA-27q8-8p72-c44c: Trend Micro Security (Consumer) 2020 (v16↗2022-05-24
▶
CVEList
CVE-2019-18190: Trend Micro Security (Consumer) 2020 (v16↗2019-12-09
▶