CVE-2019-18187VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2019-18187: Trend Micro OfficeScan Directory Traversal Vulnerability

Affects Trend Micro OfficeScanSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 25.1% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-18187 (opens in a new tab)

Description

CVE-2019-18187 is a directory traversal vulnerability in Trend Micro OfficeScan that allows an attacker to extract files from a crafted zip archive to arbitrary locations on the server. This flaw can lead to remote code execution on the affected system. The vulnerability has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information is provided in the available data.

Summary

Trend Micro OfficeScan contains a directory traversal vulnerability (CWE-22) that occurs during the extraction of files from a zip archive to a designated folder on the OfficeScan server. This improper handling allows an attacker to write files outside the intended directory, potentially enabling remote code execution. The vulnerability is identified as CVE-2019-18187 and has been observed exploited in the wild. No vendor advisory or patch information is included in the provided data.

Impact

Successful exploitation of this vulnerability can lead to remote code execution on the OfficeScan server, allowing attackers to execute arbitrary code with the privileges of the OfficeScan service. This poses a high risk of system compromise and potential lateral movement within the affected environment.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the OfficeScan server and carefully monitor for suspicious activity related to zip file processing. Follow vendor guidance once published.

Weaknesses

CWE-22Path Traversal (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 08:43:30 UTC

Weaknesses

References

Related threats