ZDI-CAN-27959
HIGH 7.8
Overdue
Oct 29, 2025
Trend Micro
Trend Micro is a major cybersecurity company known for antivirus, endpoint protection, and cloud security solutions. This high-severity vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, but delivers significant impact through confidentiality, integrity, and availability compromise with no user interaction needed. Security teams should monitor for privilege escalation attempts targeting Trend Micro products and prepare patch deployment procedures ahead of the February 2026 deadline.
Advisory Details
Researcher
Discovered by:
Lays (@_L4ys) of TRAPA Security
Reported
October 29, 2025
Deadline
February 26, 2026
49d overdue
CVSS Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H