What is CVE-2020-15602?

CVE-2020-15602 is a high-severity vulnerability in Microsoft Windows, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2020-07-15.

How severe is CVE-2020-15602?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Microsoft Windows

CVE-2020-15602

An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family of products could allow an attacker to run arbitrary code on a vulnerable system. As the Trend Micr…

EPSS: 0.010 (58.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Microsoft Windows
Trend Micro Security (Consumer) — versions 2020 (v16)
Trendmicro Antivirus\+_2020
Trendmicro Internet_security_2020
Trendmicro Maximum_security_2020
Trendmicro Premium_security_2020

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

security@trendmicro.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-15602?: CVE-2020-15602 is a high-severity vulnerability in Microsoft Windows, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2020-07-15.
How severe is CVE-2020-15602?: High severity. CVSS v3 base score is 7.8 out of 10.