Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
References
Link | Resource |
---|---|
https://www.zerodayinitiative.com/advisories/ZDI-21-420/ | Third Party Advisory VDB Entry |
https://helpcenter.trendmicro.com/en-us/article/TMKA-10293 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2021-04-22 15:15
Updated : 2021-04-29 06:09
NVD link : CVE-2021-28648
Mitre link : CVE-2021-28648
JSON object : View
CWE
CWE-269
Improper Privilege Management
Products Affected
trendmicro
- antivirus