EUVD-2025-21043CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionNVD
Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.
AnalysisAI
CVE-2025-53503 is a privilege escalation vulnerability in Trend Micro Cleaner One Pro that allows a local attacker with low privileges to delete critical Trend Micro system files, potentially including the security software itself. The CVSS 7.8 score reflects high impact across confidentiality, integrity, and availability. No public exploit code or active exploitation in the wild has been confirmed at this time, but the vulnerability requires only low privileges and no user interaction, making it a material risk for environments running this product.
Technical ContextAI
This vulnerability is rooted in CWE-64 (Improper Protection of Mass Assignment), which typically involves insufficient validation of file operations and access controls. Trend Micro Cleaner One Pro, a system optimization and security utility, likely fails to properly validate or restrict file deletion operations when invoked by low-privileged local users. The flaw allows an attacker to leverage the application's elevated execution context (or inadequate privilege boundary enforcement) to delete files outside the intended scope, including privileged Trend Micro system files. This represents a failure in proper privilege compartmentalization and file-based access control enforcement within the application's cleanup/deletion routines.
RemediationAI
- Immediate patch: Apply the latest version of Trend Micro Cleaner One Pro from Trend Micro's official website or through the application's built-in update mechanism. 2. Verify patch availability: Check Trend Micro's security advisory page for CVE-2025-53503 to confirm availability and version numbers. 3. Workaround (if patch unavailable): Restrict local system access and disable Trend Micro Cleaner One Pro file deletion features for non-administrator accounts if the application allows granular permission controls. 4. Detection: Monitor system event logs for unexpected file deletions of Trend Micro-related system files (typically in Program Files\Trend Micro). 5. Rollback: If patching is not immediately possible, consider temporarily uninstalling or disabling the application and relying on alternative system optimization tools.
Share
External POC / Exploit Code
Leaving vuln.today