ZDI-CAN-28061
HIGH 7.8
Overdue
Oct 29, 2025
Trend Micro
This vulnerability affects Trend Micro, a major cybersecurity software vendor known for antivirus and endpoint protection products. The high-severity flaw (CVSS 7.8) requires local access and valid user credentials but requires no user interaction, allowing an authenticated attacker to achieve complete system compromise including confidentiality, integrity, and availability breaches. Security teams should monitor for patches after the February 26, 2026 deadline and prioritize restricting local access to Trend Micro-protected systems in the interim.
Advisory Details
Researcher
Discovered by:
Lays (@_L4ys) of TRAPA Security
Reported
October 29, 2025
Deadline
February 26, 2026
49d overdue
CVSS Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H