CVE-2018-10507: trend micro trend micro officescan
Vulnerability summary
CVE-2018-10507 is a medium (CVSS 4.4) vulnerability in trend micro trend micro officescan. EPSS estimates a 1.31% chance of exploitation in the next 30 days, higher than 70.2% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 12-06-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.31%
Chance of exploitation in the next 30 days
Percentile
70%
Versus all other CVEs
30-day change
-0.05 pp
From 1.36% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (hyp3rlinx.altervista.org)
Maturity: unknown
TrendMicro OfficeScan XG 11.0 - Change Prevention Bypass
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Trend micro1 product
- trend micro officescan11.0 SP1, XG
Trendmicro1 product
- officescan11.0:sp1 | xg | xg:sp1
2 vendors · 2 products