CVE-2019-18190

CRITICAL

Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances.

Published: Dec 9, 2019 Modified: Jun 17, 2026

CWE-476

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (4)

Vendor	Product	Version
trendmicro	antivirus\+_security_2020	* ≥ 16.0 < 16.0.1227
trendmicro	internet_security_2020	* ≥ 16.0 < 16.0.1227
trendmicro	maximum_security_2020	* ≥ 16.0 < 16.0.1227
trendmicro	premium_security_2020	* ≥ 16.0 < 16.0.1227

GitHub Security Advisory GHSA-27q8-8p72-c44c

Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer...

References (2)

https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124031.aspx Vendor Advisory
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124031.aspx Vendor Advisory

Risk Scores

CVSS Score 9.8 / 10

EPSS Score 2.68%

Top 15% most likely to be exploited

Threat Score 40 / 100

Data Sources

NVD EPSS GitHub