Local Privilege Escalation Vulnerability in Trend Micro Security Software
CVE-2025-49384

7.8HIGH

Key Information:

Vendor

Trend Micro
Status
Trend Micro Internet Security (consumer)
Vendor
CVE Published:
17 June 2025

What is CVE-2025-49384?

A local privilege escalation vulnerability has been identified in Trend Micro Security 17.8 (Consumer) software, which may allow an unprivileged attacker to follow links that lead to the unintended deletion of sensitive Trend Micro files. This poses significant risks as it compromises the integrity of the security solution itself, potentially leaving systems vulnerable to further exploitation. Users are urged to apply the latest patches and follow best practices to mitigate the risks associated with this vulnerability.

Affected Version(s)

Trend Micro Internet Security (Consumer) 17.8 < 17.8.1464

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-11112

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-49384 : Local Privilege Escalation Vulnerability in Trend Micro Security Software