CVE-2020-27696

3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 79.87%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Trendmicro Antivirus\+ Security 2020 Trendmicro Internet Security 2020 Trendmicro Maximum Security 2020 +2 more

Timeline

PublishedNov 18

Latest updateMay 24

Description

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory which can lead to obtaining administrative privileges during the installation of the product.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶NVDtrendmicro/maximum_security_202016.0

▶NVDtrendmicro/premium_security_202016.0

▶NVDtrendmicro/internet_security_202016.0

▶NVDtrendmicro/antivirus\+_security_202016.0

▶CVEListV5trend_micro/trend_micro_security_(consumer)2020 (v16)

🔴Vulnerability Details

GHSA

GHSA-fr9h-qp6m-f727: Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system di↗2022-05-24

▶

CVEList

CVE-2020-27696: Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system di↗2020-11-18

▶