High severity7.8NVD Advisory· Published Oct 21, 2019· Updated Jun 17, 2026

CVE-2019-9491

Description

Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Anti-Threat Toolkitllm-fuzzy2 versions
<=1.62.0.1218+ 1 more
- (no CPE)range: <=1.62.0.1218
- (no CPE)range: Version 1.62.0.1218 and below

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2019/Oct/42nvdExploitMailing ListThird Party Advisory
seclists.org/fulldisclosure/2020/Jan/50nvdExploitMailing ListThird Party Advisory
seclists.org/bugtraq/2019/Oct/30nvdExploitMailing ListThird Party Advisory
seclists.org/bugtraq/2020/Jan/55nvdExploitMailing ListThird Party Advisory
success.trendmicro.com/solution/000149878nvdVendor Advisory
hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txtnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.010
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000