ZDI-CAN-27868
HIGH 7.8
Overdue
Oct 08, 2025
Trend Micro
Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security products. This high-severity vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, but once executed, it grants an attacker complete control over confidentiality, integrity, and availability of the affected system. Security teams should monitor for patches from Trend Micro by the February 2026 deadline and prioritize updating systems in environments where local user access cannot be strictly controlled.
Advisory Details
Researcher
Discovered by:
Lays (@_L4ys) of TRAPA Security
Reported
October 08, 2025
Deadline
February 05, 2026
70d overdue
CVSS Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H