CVE-2020-8607
An input validation vulnerability found in multiple Trend Micro products utilizing a particular...
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
- Record
CVE-2020-8607- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
- Record
CVE-2020-8607- Updated
- 2026-11-02
EUVDEUVD-2020-29455 No score
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
- Record
EUVD-2020-29455- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjwf-2r6c-6h5f No score
An input validation vulnerability found in multiple Trend Micro products utilizing a particular...
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
- Record
GHSA-cjwf-2r6c-6h5f- Updated
- 2026-11-02
Affected products
- trend micro anti-threat toolkit (attk)
- trend micro apex one
- trend micro deep security
- trend micro housecall
- trend micro officescan
- trend micro portable security
- trend micro rootkit buster
- trend micro safe lock
- trend micro security (consumer family)
- trend micro serverprotect
- trend micro worry-free business security
- trend micro, inc. micro deep security
Show 13 moreShow less
- trend micro, inc. micro worry-free business security
- trendmicro antivirus toolkit
- trendmicro apex one
- trendmicro deep security
- trendmicro officescan
- trendmicro officescan business security
- trendmicro officescan business security service
- trendmicro officescan cloud
- trendmicro online scan
- trendmicro portable security
- trendmicro rootkit buster
- trendmicro safe lock
- trendmicro serverprotect
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-8607 is a medium vulnerability (CVSS 6.7) in Trend Micro Anti-threat Toolkit (attk), published August 5, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. No source names a fixed version.