CVE-2019-14686: trend micro trend micro ransom buster, trend micro security (consumer) Uncontrolled Search Path Element

Vulnerability summary

CVE-2019-14686 is a high (CVSS 7.8) Uncontrolled Search Path Element vulnerability in trend micro trend micro ransom buster, trend micro security (consumer). EPSS estimates a 1.20% chance of exploitation in the next 30 days, higher than 67.7% of scored vulnerabilities.

Timeline

1. 21-08-2019
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.

• CWE-427Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.