CVE-2019-18190

Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
trendmicroCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
trendmicroantivirus\+_security_2020
16.0 ≤
𝑥
< 16.0.1227
trendmicrointernet_security_2020
16.0 ≤
𝑥
< 16.0.1227
trendmicromaximum_security_2020
16.0 ≤
𝑥
< 16.0.1227
trendmicropremium_security_2020
16.0 ≤
𝑥
< 16.0.1227
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124031.aspx
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124031.aspx