ZDI-CAN-25629 HIGH 7.0 Overdue Dec 11, 2024

Trend Micro

Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and threat defense solutions. This high-severity vulnerability (CVSS 7.0) requires local access and low-level user privileges to exploit, but causes significant damage through compromised confidentiality, integrity, and availability once successfully leveraged. Security teams should monitor for patches from Trend Micro due by April 10, 2025, and prioritize systems with untrusted local user accounts or shared access environments where this local privilege escalation could be weaponized.

Advisory Details
Researcher Discovered by: Anonymous
Reported December 11, 2024
Deadline April 10, 2025 371d overdue
CVSS Vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy