What’s Vulnerable › Vulnerabilities

CVE-2014-9641

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-02-06 · updated 2026-06-17
• Weakness: CWE-264

Description

The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.

Affected products

• Trendmicro Tmeext.Sys: through 2.0.0.1014

References

• http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx
• http://www.exploit-db.com/exploits/35962
• http://www.greyhathacker.net/?p=818
• http://www.osvdb.org/115514
• http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx
• http://www.exploit-db.com/exploits/35962
• http://www.greyhathacker.net/?p=818
• http://www.osvdb.org/115514

Get alerted when CVE-2014-9641 or the next vulnerability affects your stack