Privilege Escalation Vulnerability in Trend Micro Antivirus for Mac
CVE-2018-18328
7.8HIGH
Key Information:
- Vendor
- Trend Micro
- Vendor
- CVE Published:
- 23 October 2018
Summary
A vulnerability in Trend Micro Antivirus for Mac (Consumer) versions 7.0 and later allows local attackers to escalate privileges. The issue stems from improper validation in a function handling a user-supplied buffer at a specific offset, enabling an attacker who can execute low-privileged code to potentially gain higher privileges. This creates a security risk in affected installations, emphasizing the importance of updates and patches to mitigate exploit risks.
Affected Version(s)
Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved