Vulnerability in Trend Micro Antivirus For Mac (Consumer)
CVE-2020-25779
Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature.
EPSS: 0.008 (54.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Trend Micro Antivirus For Mac (Consumer) — versions 2020 (v10.x)
- Trendmicro Antivirus — versions 2020
References
- security@trendmicro.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-25779?
- CVE-2020-25779 is a low-severity vulnerability in Trend Micro Antivirus For Mac (Consumer). CVSS score: 3.3/10. Published 2020-10-13.
- How severe is CVE-2020-25779?
- Low severity. CVSS v3 base score is 3.3 out of 10.