CVE-2014-9641: The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Secur...

Security readout for executives and security teams

This is a local privilege escalation flaw in Trend Micro consumer antivirus products. A user who already has local access to a vulnerable machine could abuse the Trend Micro kernel driver to gain higher privileges. The business risk is highest on endpoints still running affected legacy versions. Exposure appears limited to Windows endpoints with the named Trend Micro products and tmeext.sys earlier than 2.0.0.1015. The bundled affected-product metadata is incomplete and lists placeholders, so confirm against actual endpoint inventory and Trend Micro guidance. Treat this as a targeted endpoint hygiene issue rather than an internet-wide emergency. Prioritize patching or replacing any vulnerable Trend Micro installations, especially on privileged-user workstations and systems handling sensitive data. Mitigation focus: Update affected Trend Micro products so tmeext.sys is 2.0.0.1015 or later.; Check Trend Micro support guidance for the applicable product update path.; Remove or replace unsupported affected Trend Micro installations..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.