CVE-2019-14686

EUVD-2019-5837
A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
trendmicroantivirus_\+_security_2019
15.0
trendmicrointernet_security_2019
15.0
trendmicromaximum_security_2019
15.0
trendmicropremium_security_2019
15.0
trendmicroransom_buster
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123421.aspx
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123421.aspx