{"id":"CVE-2020-8607","aliases":["EUVD-2020-29455","GHSA-cjwf-2r6c-6h5f"],"status":"published","title":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular...","description":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00557,"percentile":0.46716,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2020-08-05T14:05:23Z","modified":"2026-06-17T03:26:38Z","products":[{"vendor":"trend micro","product":"trend micro anti-threat toolkit (attk)"},{"vendor":"trend micro","product":"trend micro apex one"},{"vendor":"trend micro","product":"trend micro deep security"},{"vendor":"trend micro","product":"trend micro housecall"},{"vendor":"trend micro","product":"trend micro officescan"},{"vendor":"trend micro","product":"trend micro portable security"},{"vendor":"trend micro","product":"trend micro rootkit buster"},{"vendor":"trend micro","product":"trend micro safe lock"},{"vendor":"trend micro","product":"trend micro security (consumer family)"},{"vendor":"trend micro","product":"trend micro serverprotect"},{"vendor":"trend micro","product":"trend micro worry-free business security"},{"vendor":"trend micro, inc.","product":"trend micro deep security"},{"vendor":"trend micro, inc.","product":"trend micro worry-free business security"},{"vendor":"trendmicro","product":"antivirus_toolkit"},{"vendor":"trendmicro","product":"apex_one"},{"vendor":"trendmicro","product":"deep_security"},{"vendor":"trendmicro","product":"officescan"},{"vendor":"trendmicro","product":"officescan_business_security"},{"vendor":"trendmicro","product":"officescan_business_security_service"},{"vendor":"trendmicro","product":"officescan_cloud"},{"vendor":"trendmicro","product":"online_scan"},{"vendor":"trendmicro","product":"portable_security"},{"vendor":"trendmicro","product":"rootkit_buster"},{"vendor":"trendmicro","product":"safe_lock"},{"vendor":"trendmicro","product":"serverprotect"}],"references":[{"url":"https://success.trendmicro.com/solution/000260713","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://success.trendmicro.com/jp/solution/000260748","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://jvn.jp/vu/JVNVU99160193/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://jvn.jp/en/vu/JVNVU99160193/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8607"},{"url":"https://github.com/advisories/GHSA-cjwf-2r6c-6h5f"}],"sources":{"cve":[{"id":"CVE-2020-8607","description":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.","status":"published","published":"2020-08-05T14:05:23Z","modified":"2024-08-04T10:03:46.363Z","updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2020-29455","description":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.","status":"published","published":"2020-08-05T14:05:23Z","modified":"2024-08-04T10:03:46Z","updated_at":"2026-11-03T03:07:56.602123Z"}],"ghsa":[{"id":"GHSA-cjwf-2r6c-6h5f","title":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular...","description":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.","status":"published","published":"2022-05-24T17:24:59Z","modified":"2023-01-29T05:03:28Z","updated_at":"2026-11-02T14:45:19.492424Z"}],"nvd":[{"id":"CVE-2020-8607","description":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.","status":"published","published":"2020-08-05T14:15:13.53Z","modified":"2026-06-17T03:26:38.17Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:10.994748Z"}]}}