Trendmicro Antivirus + 2019 vulnerabilities

2 known vulnerabilities affecting trendmicro/antivirus_+_2019.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2

Vulnerabilities

Page 1 of 1

CVE-2020-15604HIGHCVSS 7.5≤ 15.02020-09-24

CVE-2020-15604 [HIGH] CWE-295 CVE-2020-15604: An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v1 An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified.

CVE-2020-24560HIGHCVSS 7.5≤ 15.02020-09-24

CVE-2020-24560 [HIGH] CWE-295 CVE-2020-24560: An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v1 An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-295: Improper server certificate verification in th