ZDI-CAN-28118
HIGH 7.8
Overdue
Oct 29, 2025
Trend Micro
Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security solutions. This high-severity vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, but once leveraged grants an attacker high-impact capabilities including confidentiality breach, system modification, and denial of service. Security teams should monitor for patches from Trend Micro before the February 2026 deadline and prioritize access controls to limit local user privileges on systems running vulnerable products.
Advisory Details
Researcher
Discovered by:
Lays (@_L4ys) of TRAPA Security
Reported
October 29, 2025
Deadline
February 26, 2026
49d overdue
CVSS Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H