What’s Vulnerable › Vulnerabilities

CVE-2018-10507

• Severity: medium (CVSS 4.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-06-12 · updated 2026-06-17

Description

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.

Affected products

• Trend Micro OfficeScan: 11.0-sp1, xg, xg-sp1

References

• http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt
• https://success.trendmicro.com/solution/1119961
• https://www.exploit-db.com/exploits/44858/
• http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt
• https://success.trendmicro.com/solution/1119961
• https://www.exploit-db.com/exploits/44858/

Get alerted when CVE-2018-10507 or the next vulnerability affects your stack