CVE-2019-19697

An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administrator privileges on the target machine in order to exploit the vulnerability.

• http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-SECURITY-BYPASS-PROTECTED-SERVICE-TAMPERING.txtExploit, Third Party Advisory
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124090.aspxVendor Advisory
• https://seclists.org/bugtraq/2020/Jan/29Exploit, Mailing List, Third Party Advisory
• http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-SECURITY-BYPASS-PROTECTED-SERVICE-TAMPERING.txtExploit, Third Party Advisory
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124090.aspxVendor Advisory
• https://seclists.org/bugtraq/2020/Jan/29Exploit, Mailing List, Third Party Advisory

Published

Jan 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19691A vulnerability in Trend Micro Apex One and OfficeScan XG co…4.9
• CVE-2019-19692Trend Micro Apex One (2019) is affected by a cross-site scri…6.1
• CVE-2019-19693The Trend Micro Security 2020 consumer family of products co…7.1
• CVE-2019-19694The Trend Micro Security 2019 (15.0.0.1163 and below) consum…4.7
• CVE-2019-19695A privilege escalation vulnerability in Trend Micro Antiviru…7.5
• CVE-2019-19696A RootCA vulnerability found in Trend Micro Password Manager…5.5
• CVE-2019-19698marc-q libwav through 2017-04-20 has a NULL pointer derefere…6.5
• CVE-2019-19699There is Authenticated remote code execution in Centreon Inf…7.2
• CVE-2019-1970A vulnerability in the Secure Sockets Layer (SSL)/Transport …7.5
• CVE-2019-19702The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to …7.5
• CVE-2019-19703In Ktor through 1.2.6, the client resends data from the HTTP…6.1
• CVE-2019-19704In JetBrains Upsource before 2020.1, information disclosure …7.5