What’s Vulnerable › Vulnerabilities

CVE-2019-14685

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-08-21 · updated 2026-06-17
• Weakness: CWE-428

Description

A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service.

Affected products

• Trendmicro Antivirus + Security 2019: 15.0
• Trendmicro Internet Security 2019: 15.0
• Trendmicro Maximum Security 2019: 15.0
• Trendmicro Premium Security 2019: 15.0

References

• http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html
• http://seclists.org/fulldisclosure/2019/Aug/26
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123420.aspx
• https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68
• http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html
• http://seclists.org/fulldisclosure/2019/Aug/26
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123420.aspx
• https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68

Get alerted when CVE-2019-14685 or the next vulnerability affects your stack