{
  "schema_version": "1.4.0",
  "id": "GHSA-cjwf-2r6c-6h5f",
  "modified": "2022-05-24T17:24:59Z",
  "published": "2022-05-24T17:24:59Z",
  "aliases": [
    "CVE-2020-8607"
  ],
  "details": "An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8607"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/vu/JVNVU99160193/index.html"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/vu/JVNVU99160193"
    },
    {
      "type": "WEB",
      "url": "https://success.trendmicro.com/jp/solution/000260748"
    },
    {
      "type": "WEB",
      "url": "https://success.trendmicro.com/solution/000260713"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2020-08-05T14:15:00Z"
  }
}