ZDI-CAN-28061 HIGH 7.8 Overdue Oct 29, 2025

Trend Micro

This vulnerability affects Trend Micro, a major cybersecurity software vendor known for antivirus and endpoint protection products. The high-severity flaw (CVSS 7.8) requires local access and valid user credentials but requires no user interaction, allowing an authenticated attacker to achieve complete system compromise including confidentiality, integrity, and availability breaches. Security teams should monitor for patches after the February 26, 2026 deadline and prioritize restricting local access to Trend Micro-protected systems in the interim.

Advisory Details
Researcher Discovered by: Lays (@_L4ys) of TRAPA Security
Reported October 29, 2025
Deadline February 26, 2026 49d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy