CVE-2020-27015
Summary
| CVE | CVE-2020-27015 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-10-30 00:15:00 UTC |
| Updated | 2020-11-05 16:15:00 UTC |
| Description | Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. |
Risk And Classification
Problem Types: CWE-209
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Trendmicro | Antivirus | 2020 | All | All | All |
| Application | Trendmicro | Antivirus | 2020 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ZDI-20-1286 | Zero Day Initiative | N/A | www.zerodayinitiative.com | Third Party Advisory, VDB Entry |
| Security Bulletin: Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability · Trend Micro for Home | N/A | helpcenter.trendmicro.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.