Vulnerability Details : CVE-2019-14686
A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.
Products affected by CVE-2019-14686
- cpe:2.3:a:trendmicro:antivirus_\+_security_2019:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:internet_security_2019:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:maximum_security_2019:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:premium_security_2019:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:ransom_buster:1.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-14686
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-14686
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST | |
7.8
|
HIGH | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2019-14686
-
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-14686
Jump to