CVE-2020-25777 Security feature bypass in Trend Micro Antivirus for Mac (Consumer)
An attacker can bypass Web Threat Protection in Trend Micro Antivirus for Mac by exploiting a kernel extension request flaw, requiring user interaction.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-25777?
CVE-2020-25777 is a medium-severity vulnerability in Trend Micro Antivirus for Mac (Consumer), published on 14 Oct 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Which versions are affected by CVE-2020-25777?
It affects 1 product.
Products include Trendmicro Antivirus.
How do I fix CVE-2020-25777?
No fix has been published for CVE-2020-25777 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-25777 being exploited?
There is no known exploitation of CVE-2020-25777 in the wild and no public exploit code.
Other vulnerabilities in Trend Micro Antivirus for Mac (Consumer)
- CVE-2022-24671 Privilege escalation in Trend Micro Antivirus for Mac
- CVE-2021-43771 Privilege escalation in Trend Micro Antivirus for MAC 2021
- CVE-2021-28648 Privilege escalation in Trend Micro Antivirus for Mac
- CVE-2020-25776 Privilege escalation in Trend Micro Antivirus for Mac (Consumer)
- CVE-2019-19695 Path traversal in Trend Micro Antivirus for Mac
Sources
Also known as GHSA-6mgx-rrgg-x26x.