{"api_version":"1","generated_at":"2026-04-23T09:38:53+00:00","cve":"CVE-2020-27015","urls":{"html":"https://cve.report/CVE-2020-27015","api":"https://cve.report/api/cve/CVE-2020-27015.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-27015","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-27015"},"summary":{"title":"CVE-2020-27015","description":"Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.","state":"PUBLIC","assigner":"security@trendmicro.com","published_at":"2020-10-30 00:15:00","updated_at":"2020-11-05 16:15:00"},"problem_types":["CWE-209"],"metrics":[],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1286/","name":"N/A","refsource":"N/A","tags":["Third Party Advisory","VDB Entry"],"title":"ZDI-20-1286 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://helpcenter.trendmicro.com/en-us/article/TMKA-09975","name":"N/A","refsource":"N/A","tags":["Vendor Advisory"],"title":"Security Bulletin: Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability · Trend Micro for Home","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27015","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27015","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"27015","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"trendmicro","cpe5":"antivirus","cpe6":"2020","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"macos","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"27015","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"trendmicro","cpe5":"antivirus","cpe6":"2020","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"macos","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"security@trendmicro.com","ID":"CVE-2020-27015","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Trend Micro Antivirus for Mac (Consumer)","version":{"version_data":[{"version_value":"2020 (v10.x) and below"}]}}]},"vendor_name":"Trend Micro"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information Disclosure"}]}]},"references":{"reference_data":[{"url":"https://helpcenter.trendmicro.com/en-us/article/TMKA-09975","refsource":"MISC","name":"https://helpcenter.trendmicro.com/en-us/article/TMKA-09975"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1286/","refsource":"MISC","name":"https://www.zerodayinitiative.com/advisories/ZDI-20-1286/"}]}},"nvd":{"publishedDate":"2020-10-30 00:15:00","lastModifiedDate":"2020-11-05 16:15:00","problem_types":["CWE-209"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM"},"exploitabilityScore":0.8,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"severity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:trendmicro:antivirus:2020:*:*:*:*:macos:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"27015","Ordinal":"188449","Title":"CVE-2020-27015","CVE":"CVE-2020-27015","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"27015","Ordinal":"1","NoteData":"Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"27015","Ordinal":"2","NoteData":"2020-10-29","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"27015","Ordinal":"3","NoteData":"2020-11-02","Type":"Other","Title":"Modified"}]}}}