CVE-2020-15603
First published: Wed Jul 15 2020(Updated: )
An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro Maximum Security | <=16.0.1302 | |
| Trendmicro Internet Security 2020 | <=16.0.1302 | |
| Trendmicro Maximum Security 2020 | <=16.0.1302 | |
| Trendmicro Premium Security 2020 | <=16.0.1302 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-15603?
CVE-2020-15603 is an invalid memory read vulnerability in Trend Micro Security 2020 consumer family of products' driver.
What software versions are affected by CVE-2020-15603?
Trend Micro Security 2020 (v16.0.0.1302 and below) consumer family of products are affected.
How can an attacker exploit CVE-2020-15603?
An attacker can manipulate the Trend Micro Security 2020 driver to perform a system call operation with an invalid address, potentially causing a system crash.
What is the severity of CVE-2020-15603?
CVE-2020-15603 has a severity rating of 7.5 (high).
How can I fix CVE-2020-15603?
Update to the latest version (v16.0.0.1303 or above) of Trend Micro Security 2020 to fix CVE-2020-15603.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/author
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/tags
- agent/description
- agent/event
- vendor/trendmicro
- canonical/trend micro maximum security
- version/trend micro maximum security/16.0.1302
- canonical/trendmicro internet security 2020
- version/trendmicro internet security 2020/16.0.1302
- canonical/trendmicro maximum security 2020
- version/trendmicro maximum security 2020/16.0.1302
- canonical/trendmicro premium security 2020
- version/trendmicro premium security 2020/16.0.1302
- vendor/microsoft
- canonical/microsoft windows