PT-2020-16201 · Trend Micro · Trend Micro Antivirus For Mac

Cees Elzinga · Published 2020-10-14 · Updated 2020-10-26 · CVE-2020-25777

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 (Consumer)

Description The issue allows an attacker to bypass the Web Threat Protection feature through a specific kernel extension request attack. This requires user interaction, where the target must either visit a malicious page or open a malicious file.

Recommendations For Trend Micro Antivirus for Mac 2020 (Consumer), consider restricting access to potentially malicious web pages and files until a patch is available. As a temporary workaround, avoid interacting with suspicious links or files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-25777

ZDI-20-1242

Affected Products

Trend Micro Antivirus For Mac

References · 4

• https://zerodayinitiative.com/advisories/ZDI-20-1242 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25777 · Vendor Advisory
• https://helpcenter.trendmicro.com/en-us/article/TMKA-09947 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25777 · Security Note