What’s Vulnerable › Vulnerabilities
CVE-2019-19693
- Severity: high (CVSS 7.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-12-20 · updated 2026-06-17
- Weakness: CWE-59
Description
The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to disclose sensitive information or to create a denial-of-service condition on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected products
- Trendmicro Antivirus+ Security 2020: from 16.0 before 16.0.1249 — fixed in 16.0.1249
- Trendmicro Internet Security 2020: from 16.0 before 16.0.1249 — fixed in 16.0.1249
- Trendmicro Maximum Security 2020: from 16.0 before 16.0.1249 — fixed in 16.0.1249
- Trendmicro Premium Security 2020: from 16.0 before 16.0.1249 — fixed in 16.0.1249
How to fix
Upgrade to a fixed version: Trendmicro Antivirus+ Security 2020 16.0.1249; Trendmicro Internet Security 2020 16.0.1249; Trendmicro Maximum Security 2020 16.0.1249; Trendmicro Premium Security 2020 16.0.1249. Check the vendor advisory for mitigations.
References
- https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124043.aspx
- https://www.zerodayinitiative.com/advisories/ZDI-19-1025/
- https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124043.aspx
- https://www.zerodayinitiative.com/advisories/ZDI-19-1025/
Get alerted when CVE-2019-19693 or the next vulnerability affects your stack