{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T05:36:31.437","vulnerabilities":[{"cve":{"id":"CVE-2018-15364","sourceIdentifier":"security@trendmicro.com","published":"2018-08-30T19:29:01.107","lastModified":"2026-06-17T01:42:19.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro OfficeScan XG (12.0) could allow a local attacker to disclose sensitive information on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability."},{"lang":"es","value":"Una vulnerabilidad de procesamiento de peticiones de tuberías nombradas, lectura fuera de límites y divulgación de información en Trend Micro OfficeScan XG (12.0) podría permitir que un atacante local revele información sensible en instalaciones vulnerables. En primer lugar, un atacante debe obtener la habilidad para ejecutar código de bajos privilegios en el sistema objetivo para explotar esta vulnerabilidad."}],"affected":[{"source":"security@trendmicro.com","affectedData":[{"vendor":"Trend Micro","product":"Trend Micro OfficeScan","versions":[{"version":"XG (12.0)","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:officescan_xg:12.0:*:*:*:*:*:*:*","matchCriteriaId":"15DDB5AE-D9F6-4972-B63F-E674489A93D8"}]}]}],"references":[{"url":"https://success.trendmicro.com/solution/1120678","source":"security@trendmicro.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-964/","source":"security@trendmicro.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://success.trendmicro.com/solution/1120678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}}]}