ZDI-26-149
MEDIUM 5.0
Published
Mar 03, 2026
Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability
Trend
Trend Micro Cleaner One Pro contains a local denial-of-service vulnerability (CVE-2025-71218) that allows low-privileged attackers to crash or disable the application. An attacker must already have code execution capability on the target system to exploit this flaw, limiting its severity to CVSS 5.0. Security teams should prioritize patching this vulnerability on systems where Cleaner One Pro is installed, particularly those that run untrusted code or serve multiple users.