What’s Vulnerable › Vulnerabilities

CVE-2020-15603

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-07-15 · updated 2026-06-17
• Weakness: CWE-125

Description

An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash.

Affected products

• Trendmicro Antivirus+ 2020: through 16.0.1302
• Trendmicro Internet Security 2020: through 16.0.1302
• Trendmicro Maximum Security 2020: through 16.0.1302
• Trendmicro Premium Security 2020: through 16.0.1302

References

• https://helpcenter.trendmicro.com/en-us/article/TMKA-09645
• https://helpcenter.trendmicro.com/en-us/article/TMKA-09645

Get alerted when CVE-2020-15603 or the next vulnerability affects your stack