Buffer Overflow Privilege Escalation in Trend Micro Maximum Security
CVE-2018-6233

7.8HIGH

Key Information:

Vendor
CVE Published:
25 May 2018

Summary

A vulnerability exists in Trend Micro Maximum Security 2018, where a buffer overflow within the processing of IOCTL 0x222060 by the tmnciesc.sys driver could be exploited. Local attackers who possess the capability to execute low-privileged code can exploit this flaw to escalate their privileges within the compromised system. Ensuring that systems are updated and protected against such vulnerabilities is crucial for maintaining security.

Affected Version(s)

Trend Micro Maximum Security 2018

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.