Integer Truncation Privilege Escalation in Trend Micro Password Manager

CVE-2021-32461

Summary

The Trend Micro Password Manager (Consumer) versions up to 5.0.0.1217 are susceptible to an Integer Truncation vulnerability that can lead to privilege escalation. This vulnerability allows a local attacker with the ability to execute low-privileged code to exploit the system. By triggering a buffer overflow, the attacker may gain elevated privileges, potentially compromising sensitive information within the affected installations. It is crucial for users to ensure their software is updated to mitigate this risk.

References