Local Privilege Escalation Flaw in Trend Micro Antivirus

CVE-2022-24671

What is CVE-2022-24671?

A local privilege escalation vulnerability exists in Trend Micro Antivirus for Max, specifically versions 11.0.2150 and earlier. This flaw allows a local attacker, who can execute low-privileged code, to manipulate files during the antivirus update process, potentially leading to elevated privileges. Exploiting this vulnerability requires an attacker to first gain access to the system under a low-privilege context.

References