CVE-2020-27014 - Trend Micro Antivirus for Mac 2020 (Consumer) contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability

Back Back to CVE browser

MEDIUM

Trend Micro Antivirus for Mac 2020 (Consumer) contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability

Published Oct 29, 2020

6.4

MEDIUM

CVSS 3.1

EPSS 0.32%

Description

Trend Micro Antivirus for Mac 2020 (Consumer) contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.

Affected products

Vendor Trend Micro Product Trend Micro Antivirus for Mac (Consumer) Default
unknown
Affected
- 2020 (v10.x) and below

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Trend Micro	Trend Micro Antivirus for Mac (Consumer)	unknown	Affected 2020 (v10.x) and below

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-367

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19538
Advisory
https://helpcenter.trendmicro.com/en-us/article/TMKA-09974
x_refsource_MISCVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-1285/
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19538		Advisory
https://helpcenter.trendmicro.com/en-us/article/TMKA-09974		x_refsource_MISCVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-1285/		x_refsource_MISCThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trendmicro

Published Oct 29, 2020

Updated Aug 4, 2024

Reserved Oct 12, 2020

Link CVE-2020-27014

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-27014

Red Hat

No data

ENISA EUVD

Assigner trendmicro

Published Oct 29, 2020

Updated Aug 4, 2024

Link EUVD-2020-19538

GitHub

No data