Symlink Vulnerability in Trend Micro Antivirus for Mac
CVE-2022-27883

7.3HIGH

Key Information:

Vendor

Trend Micro
Status
Trend Micro Antivirus For Mac
Vendor
CVE Published:
9 April 2022

What is CVE-2022-27883?

A symlink vulnerability in Trend Micro Antivirus for Mac version 11.5 enables an attacker with low-level privileges to exploit a specially-crafted file, potentially leading to privilege escalation. This could allow unauthorized actions to be performed on the system. Proper remediation measures should be taken to secure affected systems.

Affected Version(s)

Trend Micro Antivirus for Mac 11.5

References

https://helpcenter.trendmicro.com/en-us/article/tmka-10978
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-546/
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.