CVE-2018-15364

MEDIUM 4.7CVE-2018-15364 · Published 30/08/2018 · updated 17/06/2026

In short

CVE-2018-15364 is a MEDIUM (CVSS 4.7) vulnerability affecting officescan xg (trendmicro).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
officescan xg trendmicro	`= 12.0`	No fix yet

Description

A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro OfficeScan XG (12.0) could allow a local attacker to disclose sensitive information on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.

References

success.trendmicro.com/solution/1120678 · Mitigation
zerodayinitiative.com/advisories/ZDI-18-964 · Third Party Advisory

More vulnerabilities in officescan xg

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free