CVE-2020-25777: Trend Micro Antivirus for Mac Protection Bypass Vulnerability
This vulnerability allows remote attackers to bypass web filtering on affected installations of Trend Micro Antivirus for Mac. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the KERedirect module. The issue results from the improper filtering of HTTP requests. An attacker can leverage this vulnerability to bypass the protection offered by the product.
Other sources
Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-25777?
CVE-2020-25777 is a vulnerability that allows remote attackers to bypass web filtering on Trend Micro Antivirus for Mac.
How does CVE-2020-25777 work?
CVE-2020-25777 requires user interaction, where the target must visit a malicious page or open a malicious file to exploit the vulnerability.
What is the severity of CVE-2020-25777?
CVE-2020-25777 has a severity rating of medium with a score of 5.4.
Which versions of Trend Micro Antivirus for Mac are affected by CVE-2020-25777?
Trend Micro Antivirus for Mac versions 2019 and 2020 are affected by CVE-2020-25777.
How can I fix CVE-2020-25777?
To fix CVE-2020-25777, update Trend Micro Antivirus for Mac to the latest version available.