Trendmicro Safe Lock vulnerabilities

2 vulnerabilities

Known vulnerabilities in Trendmicro Safe Lock, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2021-25252trend microtrend micro virus scan api (vsapi) engine+19
EPSS score
0.62%
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.7.2CVE-2020-8607trend microtrend micro anti-threat toolkit (attk)+22
EPSS score
0.55%
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.