CVE-2019-15627 json
Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to av…
published 2019-10-17 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-6584
- cvss
- 7.1
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.3%
- EPSS 1.3% chance of exploitation in 30 days, percentile 70%
- public exploits
- 1
- Exploit-DB
Summary
Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected.
Timeline
- Published
- First public exploit (EDB-47751)
Exploit prediction
1.31% chance of exploitation in the next 30 days, higher than 70% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-47751 Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite local, 2019-12-06
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
| NVD | 2.0 | 6.6 | AV:L/AC:L/Au:N/C:N/I:C/A:C |
Affected products
- Trend Micro Deep Security Agent
Classification
- Weakness
-
- CWE-59 Improper Link Resolution Before File Access
References
Sources
- CVE List CVE-2019-15627
- NVD CVE-2019-15627
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.