Views:

Release Date: August 14, 2019

CVE Vulnerability Identifier(s): CVE-2019-14685

Platform: Windows

CVSS 3.0 Scores: 6.3

Severity Ratings: Medium


Summary

Trend Micro has released updates to the Trend Micro Security 2019 (version 15.0) family of consumer products which resolve a local privilege escalation vulnerability.

Affected versions

Product Affected Versions Platform Language(s)
Premium Security 2019 (v15.0) Microsoft Windows English
Maximum Security
2019 (v15.0)
Microsoft Windows English
Internet Security
2019 (v15.0)
Microsoft Windows English
Antivirus + Security
2019 (v15.0)
Microsoft Windows English

Solution

Product Updated Build Platform Language(s)
All Versions Above 15.0 with plugservicebundle.dll v15.0.1239 Microsoft Windows English

 

Trend Micro has addressed these vulnerabilities via a patch that is available now through the product’s automatic ActiveUpdate feature for all versions of Trend Micro Security 2019 (version 15) listed above.

Vulnerability Details:

This patch includes mitigation for the following vulnerabilities:

  • CVE-2019-14685: A local privilege escalation vulnerability exists in the versions of Trend Micro Security 2019 listed above in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service.

Trend Micro has received no reports nor is aware of any actual attacks against the affected products related to this vulnerability at this time.

Mitigating Factors

Exploiting these types of vulnerabilities require that an attacker has access (physical or remote) to a vulnerable machine.

Even though an exploit may require several specific conditions to be met, Trend Micro strongly encourages customers to upgrade to the latest build as soon as possible.

Acknowledgement

Trend Micro would like to thank the following individuals and/or organizations for responsibly disclosing these issues and working with Trend Micro to help protect our customers:

  • Silton of Tempest Security Intelligence
Comments (0)
Add a comment
Home Support

Security Bulletin: Trend Micro Security 2019 (Consumer) Local Privilege Escalation Vulnerability

Release Date: August 14, 2019

CVE Vulnerability Identifier(s): CVE-2019-14685

Platform: Windows

CVSS 3.0 Scores: 6.3

Severity Ratings: Medium


Summary

Trend Micro has released updates to the Trend Micro Security 2019 (version 15.0) family of consumer products which resolve a local privilege escalation vulnerability.

Affected versions

Product Affected Versions Platform Language(s)
Premium Security 2019 (v15.0) Microsoft Windows English
Maximum Security
2019 (v15.0)
Microsoft Windows English
Internet Security
2019 (v15.0)
Microsoft Windows English
Antivirus + Security
2019 (v15.0)
Microsoft Windows English

Solution

Product Updated Build Platform Language(s)
All Versions Above 15.0 with plugservicebundle.dll v15.0.1239 Microsoft Windows English

 

Trend Micro has addressed these vulnerabilities via a patch that is available now through the product’s automatic ActiveUpdate feature for all versions of Trend Micro Security 2019 (version 15) listed above.

Vulnerability Details:

This patch includes mitigation for the following vulnerabilities:

  • CVE-2019-14685: A local privilege escalation vulnerability exists in the versions of Trend Micro Security 2019 listed above in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service.

Trend Micro has received no reports nor is aware of any actual attacks against the affected products related to this vulnerability at this time.

Mitigating Factors

Exploiting these types of vulnerabilities require that an attacker has access (physical or remote) to a vulnerable machine.

Even though an exploit may require several specific conditions to be met, Trend Micro strongly encourages customers to upgrade to the latest build as soon as possible.

Acknowledgement

Trend Micro would like to thank the following individuals and/or organizations for responsibly disclosing these issues and working with Trend Micro to help protect our customers:

  • Silton of Tempest Security Intelligence

Was this helpful?

  • It wasn't helpful at all.
  • It was not helpful.
  • Just okay.
  • It was helpful.
  • It was very helpful.
Messenger Icon
Ask Vanessa

Get in touch with our Social Media ambassador and she'll answer your question or issue.

Hi there!  👋

How can we help you today? Click the button below to start chatting with support.

Product Image
Close
Trend Micro Support

Our Support Representative will be with you shortly.

Product Image

Trend Micro Support

Usually replies in a few minutes.

Before we start, kindly fill up the details below:

Please see our privacy policy for more information on how we use your data.