CVE-2019-19696

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishing sites.

• CWE-522

• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspxVendor Advisory
• https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1124091.aspxVendor Advisory
• https://jvn.jp/en/jp/JVN37183636/index.htmlThird Party Advisory
• https://jvn.jp/jp/JVN37183636/index.htmlThird Party Advisory
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124092.aspxVendor Advisory
• https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1124091.aspxVendor Advisory
• https://jvn.jp/en/jp/JVN37183636/index.htmlThird Party Advisory
• https://jvn.jp/jp/JVN37183636/index.htmlThird Party Advisory

Published

Jan 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19690Trend Micro Mobile Security for Android (Consumer) versions …9.8
• CVE-2019-19691A vulnerability in Trend Micro Apex One and OfficeScan XG co…4.9
• CVE-2019-19692Trend Micro Apex One (2019) is affected by a cross-site scri…6.1
• CVE-2019-19693The Trend Micro Security 2020 consumer family of products co…7.1
• CVE-2019-19694The Trend Micro Security 2019 (15.0.0.1163 and below) consum…4.7
• CVE-2019-19695A privilege escalation vulnerability in Trend Micro Antiviru…7.5
• CVE-2019-19697An arbitrary code execution vulnerability exists in the Tren…6.7
• CVE-2019-19698marc-q libwav through 2017-04-20 has a NULL pointer derefere…6.5
• CVE-2019-19699There is Authenticated remote code execution in Centreon Inf…7.2
• CVE-2019-1970A vulnerability in the Secure Sockets Layer (SSL)/Transport …7.5
• CVE-2019-19702The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to …7.5
• CVE-2019-19703In Ktor through 1.2.6, the client resends data from the HTTP…6.1