What is the CVSS score of CVE-2025-53503?

CVE-2025-53503 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Trend Micro are affected by CVE-2025-53503?

CVE-2025-53503 is a privilege escalation vulnerability in Trend Micro Cleaner One Pro that allows low-privileged local users to delete critical security software files, potentially disabling endpoint…. A patch is available.

How to fix or mitigate CVE-2025-53503?

Within 24 hours: Identify all systems running Trend Micro Cleaner One Pro and confirm current installed versions. Within 7 days: Apply vendor-released patch to all affected instances; prioritize systems with high-value data or production criticality. Within 30 days: Verify patch deployment completion across the entire fleet via endpoint management tools and document remediation evidence for compliance records.

Trend Micro CVE-2025-53503

EUVD-2025-21043 HIGH

Windows Shortcut Following (.LNK) (CWE-64)

2025-07-10 security@trendmicro.com

Privilege Escalation Trend Micro Cleaner One

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:28 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

6.8.323

EUVD ID Assigned

Mar 16, 2026 - 06:52 euvd

EUVD-2025-21043

Analysis Generated

Mar 16, 2026 - 06:52 vuln.today

CVE Published

Jul 10, 2025 - 19:15 nvd

HIGH 7.8

DescriptionCVE.org

Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.

AnalysisAI

CVE-2025-53503 is a privilege escalation vulnerability in Trend Micro Cleaner One Pro that allows a local attacker with low privileges to delete critical Trend Micro system files, potentially including the security software itself. The CVSS 7.8 score reflects high impact across confidentiality, integrity, and availability. No public exploit code or active exploitation in the wild has been confirmed at this time, but the vulnerability requires only low privileges and no user interaction, making it a material risk for environments running this product.

Technical ContextAI

This vulnerability is rooted in CWE-64 (Improper Protection of Mass Assignment), which typically involves insufficient validation of file operations and access controls. Trend Micro Cleaner One Pro, a system optimization and security utility, likely fails to properly validate or restrict file deletion operations when invoked by low-privileged local users. The flaw allows an attacker to leverage the application's elevated execution context (or inadequate privilege boundary enforcement) to delete files outside the intended scope, including privileged Trend Micro system files. This represents a failure in proper privilege compartmentalization and file-based access control enforcement within the application's cleanup/deletion routines.

RemediationAI

Immediate patch: Apply the latest version of Trend Micro Cleaner One Pro from Trend Micro's official website or through the application's built-in update mechanism. 2. Verify patch availability: Check Trend Micro's security advisory page for CVE-2025-53503 to confirm availability and version numbers. 3. Workaround (if patch unavailable): Restrict local system access and disable Trend Micro Cleaner One Pro file deletion features for non-administrator accounts if the application allows granular permission controls. 4. Detection: Monitor system event logs for unexpected file deletions of Trend Micro-related system files (typically in Program Files\Trend Micro). 5. Rollback: If patching is not immediately possible, consider temporarily uninstalling or disabling the application and relying on alternative system optimization tools.