ZDI-CAN-24929
MEDIUM 4.7
Overdue
Aug 14, 2024
Trend Micro
Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security solutions. This medium-severity vulnerability (CVSS 4.7) requires local access and low-level user privileges to exploit, but successfully compromises confidentiality by allowing unauthorized information disclosure without affecting system integrity or availability. Security teams should monitor for patches from Trend Micro by the December 12, 2024 deadline and prioritize updates for systems where local user access cannot be fully restricted.
Advisory Details
Researcher
Discovered by:
Anonymous
Reported
August 14, 2024
Deadline
December 12, 2024
490d overdue
CVSS Vector
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N