ZDI-CAN-27868 HIGH 7.8 Overdue Oct 08, 2025

Trend Micro

Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security products. This high-severity vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, but once executed, it grants an attacker complete control over confidentiality, integrity, and availability of the affected system. Security teams should monitor for patches from Trend Micro by the February 2026 deadline and prioritize updating systems in environments where local user access cannot be strictly controlled.

Advisory Details
Researcher Discovered by: Lays (@_L4ys) of TRAPA Security
Reported October 08, 2025
Deadline February 05, 2026 70d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy