Local Privilege Escalation Flaw in Trend Micro Antivirus
CVE-2022-24671
7.8HIGH
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 24 February 2022
What is CVE-2022-24671?
A local privilege escalation vulnerability exists in Trend Micro Antivirus for Max, specifically versions 11.0.2150 and earlier. This flaw allows a local attacker, who can execute low-privileged code, to manipulate files during the antivirus update process, potentially leading to elevated privileges. Exploiting this vulnerability requires an attacker to first gain access to the system under a low-privilege context.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Trend Micro Antivirus for Mac 11.0.2150 and below