CVE-2019-20357: High severity trend micro antivirus+ security vulnerability
A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-20357?
CVE-2019-20357 is a Persistent Arbitrary Code Execution vulnerability in Trend Micro Security 2020 (v160) and 2019 (v15) consumer family of products.
How does CVE-2019-20357 work?
CVE-2019-20357 allows an attacker to create a malicious program to escalate privileges and attain persistence on a vulnerable system.
Which software versions are affected by CVE-2019-20357?
Trend Micro Antivirus + Security 2019 (v15.0), Trend Micro Antivirus + Security 2020 (v16.0), Trend Micro Internet Security 2019 (v15.0), Trend Micro Internet Security 2020 (v16.0), Trend Micro Maximum Security 2019 (v15.0), Trend Micro Maximum Security 2020 (v16.0), Trend Micro Premium Security 2019 (v15.0), and Trend Micro Premium Security 2020 (v16.0) are affected by CVE-2019-20357.
What is the severity of CVE-2019-20357?
CVE-2019-20357 has a severity score of 7.8 (high).
How can CVE-2019-20357 be fixed?
To fix CVE-2019-20357, users should update their Trend Micro Security software to the latest available version.