CVE-2020-8607

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2020
Source publication: Aug 5, 2020
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Trend Micro Apex One

Vendor: Trend Micro
Product: Trend Micro Apex One
Platforms: Unknown
Default status: Unknown

Trend Micro Apex One · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2019 (On premise), SaaS	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro OfficeScan

Vendor: Trend Micro
Product: Trend Micro OfficeScan
Platforms: Unknown
Default status: Unknown

Trend Micro OfficeScan · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
XG SP1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro Deep Security

Vendor: Trend Micro
Product: Trend Micro Deep Security
Platforms: Unknown
Default status: Unknown

Trend Micro Deep Security · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
12.x, 11.x. 10.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro Worry-Free Business Security

Vendor: Trend Micro
Product: Trend Micro Worry-Free Business Security
Platforms: Unknown
Default status: Unknown

Trend Micro Worry-Free Business Security · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0 SP1, Services (SaaS)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro Security (Consumer Family)

Vendor: Trend Micro
Product: Trend Micro Security (Consumer Family)
Platforms: Unknown
Default status: Unknown

Trend Micro Security (Consumer Family) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2020 (v16), 2019 (v15)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro Safe Lock

Vendor: Trend Micro
Product: Trend Micro Safe Lock
Platforms: Unknown
Default status: Unknown

Trend Micro Safe Lock · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0 SP1, TXOne Ed	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro ServerProtect

Vendor: Trend Micro
Product: Trend Micro ServerProtect
Platforms: Unknown
Default status: Unknown

Trend Micro ServerProtect · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
SPFS 6.0, SPNAF 5.8, SPEMC 5.8, SPNT 5.8	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro Portable Security

Vendor: Trend Micro
Product: Trend Micro Portable Security
Platforms: Unknown
Default status: Unknown

Trend Micro Portable Security · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.x, 2.x	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro HouseCall

Vendor: Trend Micro
Product: Trend Micro HouseCall
Platforms: Unknown
Default status: Unknown

Trend Micro HouseCall · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
8.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro Anti-Threat Toolkit (ATTK)

Vendor: Trend Micro
Product: Trend Micro Anti-Threat Toolkit (ATTK)
Platforms: Unknown
Default status: Unknown

Trend Micro Anti-Threat Toolkit (ATTK) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.62.1240 and below	`affected`	Unavailable	Unavailable	Unavailable	None listed

Trend Micro Rootkit Buster

Vendor: Trend Micro
Product: Trend Micro Rootkit Buster
Platforms: Unknown
Default status: Unknown

Trend Micro Rootkit Buster · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.2	`affected`	Unavailable	Unavailable	Unavailable	None listed