Firetruck

CVE-2019-18187

KEV
Updated Oct 29, 2025 · PUBLISHED
View KEV entry →

Description

Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Trend Micro OfficeScanTrend Micro / Trend Micro OfficeScanVersion 11.0, XG (12.0)affected