Improper Access Control in Trend Micro Antivirus for Mac 2021
CVE-2021-43771

7.8HIGH

Key Information:

Vendor
Trend Micro
Status
Trend Micro Antivirus For Mac 2021
Vendor
CVE Published:
30 November 2021

Summary

Trend Micro Antivirus for Mac 2021 v11 is susceptible to an improper access control vulnerability that can result in privilege escalation. This flaw allows an attacker, who has already executed low-privileged code on the system, to gain elevated privileges within the application. Exploitation of this vulnerability could lead to unauthorized access and control of critical features within the software, potentially compromising the security of the system.

Affected Version(s)

Trend Micro Antivirus for MAC 2021 11.0

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-10832
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-1320/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.