Web Server API Flaw in Trend Micro Antivirus for Mac 2020
CVE-2020-27013

4.4MEDIUM

Key Information:

Vendor

Trend Micro
Status
Trend Micro Antivirus For Mac (consumer)
Vendor
CVE Published:
14 October 2020

What is CVE-2020-27013?

Trend Micro Antivirus for Mac 2020 features a security weakness stemming from its improper handling of a web server API. This flaw permits an attacker with the ability to execute low-privileged code on a targeted Mac device to read and manipulate sensitive product and user data. By exploiting this vulnerability, an attacker could potentially gain access to critical information, which poses significant risks to user security and privacy.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Trend Micro Antivirus for Mac (Consumer) 2020 (v10.x)

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-09950
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-20-1243/
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.