ZDI-CAN-26661
HIGH 7.0
Overdue
Jun 03, 2025
Trend Micro
Trend Micro is a well-known cybersecurity company that produces antivirus, endpoint protection, and threat management software. This vulnerability (CVSS 7.0) requires local access and low-level user privileges to exploit, but delivers high impact across confidentiality, integrity, and authenticity with no user interaction needed. Security teams should monitor for exploitation attempts targeting Trend Micro products and prioritize patching before the October 1st vendor deadline, particularly in environments where local account compromise is a concern.
Advisory Details
Researcher
Discovered by:
Xavier DANEST - Decathlon
Reported
June 03, 2025
Deadline
October 01, 2025
197d overdue
CVSS Vector
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H