CVE-2020-27697

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-18 · updated 2026-06-17
Weakness: CWE-59

Description

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges (symlink attack) which can lead to obtaining administrative privileges during the installation of the product.

Affected products

Trendmicro Antivirus+ Security 2020: through 16.0
Trendmicro Internet Security 2020: through 16.0
Trendmicro Maximum Security 2020: through 16.0
Trendmicro Premium Security 2020: through 16.0

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-10036
https://helpcenter.trendmicro.com/en-us/article/TMKA-10036

Get alerted when CVE-2020-27697 or the next vulnerability affects your stack