Privilege Escalation Vulnerability in Trend Micro Maximum Security

CVE-2018-6235

What is CVE-2018-6235?

An Out-of-Bounds write privilege escalation vulnerability exists in Trend Micro Maximum Security 2018. This flaw involves the processing of IOCTL 0x222814 by the tmnciesc.sys driver, which can allow a local attacker with low-privileged code execution capability to escalate their privileges on affected installations. Attackers need to leverage this vulnerability by first executing low-privileged code on the target system to exploit this security weakness effectively.

References