ZDI-CAN-27896 HIGH 7.8 Overdue Oct 29, 2025

Trend Micro

Trend Micro, a major cybersecurity and antivirus software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges but requires no user interaction to exploit, potentially allowing attackers to gain full system control. The vulnerability affects confidentiality, integrity, and availability of the affected system. Security teams should monitor for patches from Trend Micro before the February 2026 deadline and prioritize updates for systems where local users may have untrusted access.

Advisory Details
Researcher Discovered by: Lays (@_L4ys) of TRAPA Security
Reported October 29, 2025
Deadline February 26, 2026 49d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy