CVE-2020-27695

CWE-4263 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 79.87%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Trendmicro Antivirus\+ Security 2020 Trendmicro Internet Security 2020 Trendmicro Maximum Security 2020 +2 more

Timeline

PublishedNov 18

Latest updateMay 24

Description

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory which can lead to obtaining administrative privileges during the installation of the product.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶NVDtrendmicro/maximum_security_202016.0

▶NVDtrendmicro/premium_security_202016.0

▶NVDtrendmicro/internet_security_202016.0

▶NVDtrendmicro/antivirus\+_security_202016.0

▶CVEListV5trend_micro/trend_micro_security_(consumer)2020 (v16)

🔴Vulnerability Details

GHSA

GHSA-cxpp-2492-jpgw: Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local d↗2022-05-24

▶

CVEList

CVE-2020-27695: Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local d↗2020-11-18

▶