ZDI-CAN-28118 HIGH 7.8 Overdue Oct 29, 2025

Trend Micro

Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security solutions. This high-severity vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, but once leveraged grants an attacker high-impact capabilities including confidentiality breach, system modification, and denial of service. Security teams should monitor for patches from Trend Micro before the February 2026 deadline and prioritize access controls to limit local user privileges on systems running vulnerable products.

Advisory Details
Researcher Discovered by: Lays (@_L4ys) of TRAPA Security
Reported October 29, 2025
Deadline February 26, 2026 49d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy