CVE-2019-18190
Critical
Description
Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances.
SeverityCritical
CVSS9.8
Exploit probability—
ProductTrendmicro Antivirus\+ Security
PublishedDec 9, 2019
First seenDec 9, 2019
How to fix
Update
- trendmicro antivirus\+_security_202016.0.1227 or later
- trendmicro internet_security_202016.0.1227 or later
- trendmicro maximum_security_202016.0.1227 or later
- trendmicro premium_security_202016.0.1227 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro antivirus\+_security_2020 | 16.0 ≤ v < 16.0.1227 | 16.0.1227 |
| trendmicro internet_security_2020 | 16.0 ≤ v < 16.0.1227 | 16.0.1227 |
| trendmicro maximum_security_2020 | 16.0 ≤ v < 16.0.1227 | 16.0.1227 |
| trendmicro premium_security_2020 | 16.0 ≤ v < 16.0.1227 | 16.0.1227 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.