ZDI-26-149 MEDIUM 5.0 Published Mar 03, 2026

Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability

Trend

Trend Micro Cleaner One Pro contains a local denial-of-service vulnerability (CVE-2025-71218) that allows low-privileged attackers to crash or disable the application. An attacker must already have code execution capability on the target system to exploit this flaw, limiting its severity to CVSS 5.0. Security teams should prioritize patching this vulnerability on systems where Cleaner One Pro is installed, particularly those that run untrusted code or serve multiple users.

Related CVE

CVE-2025-71218

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy