Privilege Escalation Vulnerability in Trend Micro Maximum Security

CVE-2018-6236

What is CVE-2018-6236?

A privilege escalation vulnerability exists in Trend Micro Maximum Security 2018 due to improper handling of IOCTL 0x222813 by the tmusa driver. An attacker with low-privileged access can exploit this flaw to escalate their privileges on the affected system, potentially compromising system security. To successfully exploit this vulnerability, the attacker must first execute low-privileged code, making it essential for users to apply available security updates to safeguard against potential exploitation.

References