Privilege Escalation Vulnerability in Trend Micro Antivirus for Mac 2020
CVE-2020-25776

7.8HIGH

Key Information:

Vendor
Trend Micro
Status
Trend Micro Antivirus For Mac (consumer)
Vendor
CVE Published:
2 October 2020

Summary

Trend Micro Antivirus for Mac 2020 is susceptible to a symbolic link privilege escalation attack. This vulnerability allows an attacker with low-privileged code execution capabilities to exploit a critical system file, ultimately escalating their privileges. Successful exploitation could enable unauthorized access and manipulation of system functions, posing significant risks to system integrity and user data.

Affected Version(s)

Trend Micro Antivirus for Mac (Consumer) 2020 (v10.x)

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-09924
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-20-1236/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.