CVE-2018-15364: trend micro trend micro officescan

Vulnerability summary

CVE-2018-15364 is a medium (CVSS 4.7) vulnerability in trend micro trend micro officescan. EPSS estimates a 2.08% chance of exploitation in the next 30 days, higher than 81.1% of scored vulnerabilities.

Timeline

1. 30-08-2018
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro OfficeScan XG (12.0) could allow a local attacker to disclose sensitive information on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.