Improper Access Control Flaw in Trend Micro Antivirus for Mac
CVE-2021-28648

7.8HIGH

Key Information:

Vendor

Trend Micro
Status
Trend Micro Antivirus For Mac
Vendor
CVE Published:
22 April 2021

What is CVE-2021-28648?

Trend Micro Antivirus for Mac versions 2020 and 2021 contain a vulnerability that allows attackers to exploit inadequate access controls to escalate privileges. This flaw requires an attacker to run low-privileged code on the target system, potentially leading to full local privilege escalation within the application. Timely updates and patches are essential to mitigate risks associated with this vulnerability.

Affected Version(s)

Trend Micro Antivirus for Mac 2021 (11), 2020 (10.5)

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-10293
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-420/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.