Privilege Escalation Vulnerability in Trend Micro Antivirus for Mac
CVE-2018-18328

7.8HIGH

Key Information:

Vendor
CVE Published:
23 October 2018

Summary

A vulnerability in Trend Micro Antivirus for Mac (Consumer) versions 7.0 and later allows local attackers to escalate privileges. The issue stems from improper validation in a function handling a user-supplied buffer at a specific offset, enabling an attacker who can execute low-privileged code to potentially gain higher privileges. This creates a security risk in affected installations, emphasizing the importance of updates and patches to mitigate exploit risks.

Affected Version(s)

Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.