CVE-2019-19695 — Link Following in Antivirus

CWE-59 — Link Following3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 40.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trendmicro AntivirusTrend Micro Antivirus FOR MAC
Timeline
PublishedDec 24
Latest updateMay 24

Description

A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below) could potentially allow an attacker to create a symbolic link to a target file and modify it.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDtrendmicro/antivirus9.0.1379
▶CVEListV5trend_micro/trend_micro_antivirus_for_mac2019 (v9.0.1379 and below)

🔴Vulnerability Details

2
GHSA
GHSA-2qjj-29x2-ffcq: A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9↗2022-05-24
▶
CVEList
CVE-2019-19695: A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9↗2019-12-24
▶
CVE-2019-19695 — Link Following in Trendmicro Antivirus | cvebase