CVE Feed

    Dashboard / CVE / CVE-2009-0686

    CVE-2009-0686

    The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \Device\tmactmon that overwrites memory.

    Published:Apr 1, 2009
    Last Modified:Apr 23, 2026
    EPS:Apr 1, 2009
    EPSS Score:0.00117
    CVSS Score:7.2

    Affected Products

    Vendor
    Trendmicro
    Product
    Internet Security

    Exploits

    http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.ziphttp://www.securityfocus.com/bid/34304http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.ziphttp://www.securityfocus.com/bid/34304https://www.exploit-db.com/exploits/8322

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-23940 (CVSS 7.8) — Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2…
    CVE-2021-43772 (CVSS 5.5) — Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected fol…
    CVE-2018-18333 (CVSS 7.8) — A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below cou…
    CVE-2018-10514 (CVSS 7.8) — A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products co…
    CVE-2018-15363 (CVSS 7.8) — An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products coul…
    CVE-2018-10513 (CVSS 7.8) — A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer)…
    CVE-2018-3608 (CVSS 9.8) — A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hoo…
    CVE-2018-6234 (CVSS 5.5) — An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security (Consumer) 2018 cou…
    CVE-2018-6235 (CVSS 7.8) — An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 coul…
    CVE-2018-6233 (CVSS 7.8) — A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could all…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High