Vulnerability Details : CVE-2019-14686
A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.
Exploit prediction scoring system (EPSS) score for CVE-2019-14686
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 25 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2019-14686
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
|
7.8
|
HIGH | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2019-14686
-
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-14686
Products affected by CVE-2019-14686
- cpe:2.3:a:trendmicro:antivirus_\+_security_2019:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:internet_security_2019:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:maximum_security_2019:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:premium_security_2019:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:ransom_buster:1.0:*:*:*:*:*:*:*