ZDI-CAN-27999 HIGH 7.8 Overdue Oct 08, 2025

Trend Micro

Trend Micro is a well-known cybersecurity software vendor that produces antivirus, endpoint protection, and threat defense solutions. This vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, but once compromised grants an attacker high-impact capabilities including confidentiality, integrity, and availability breaches. Security teams should monitor for any suspicious local privilege escalation attempts or unusual behavior from Trend Micro products in their environment, particularly until patches are released by the February 2026 deadline.

Advisory Details
Researcher Discovered by: Xavier DANEST - Decathlon
Reported October 08, 2025
Deadline February 05, 2026 70d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy