CVE-2024-32849

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-32849
Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://helpcenter.trendmicro.com/en-us/article/tmka-19175 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-576/ Third Party Advisory
https://helpcenter.trendmicro.com/en-us/article/tmka-19175 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-576/ Third Party Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:trendmicro:maximum_security_2022:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:maximum_security_2023:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

30 Jul 2025, 21:01

Type Values Removed Values Added
First Time Microsoft
Microsoft windows
Trendmicro maximum Security 2023
Trendmicro maximum Security 2022
CPE cpe:2.3:a:trendmicro:maximum_security_2024:17.7:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:maximum_security_2022:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:maximum_security_2023:*:*:*:*:*:*:*:*

30 Jul 2025, 20:31

Type Values Removed Values Added
CPE cpe:2.3:a:trendmicro:maximum_security_2024:17.7:*:*:*:*:*:*:*
First Time Trendmicro
Trendmicro maximum Security 2024

30 Jul 2025, 00:13

Type Values Removed Values Added
References () https://helpcenter.trendmicro.com/en-us/article/tmka-19175 - () https://helpcenter.trendmicro.com/en-us/article/tmka-19175 - Vendor Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-24-576/ - () https://www.zerodayinitiative.com/advisories/ZDI-24-576/ - Third Party Advisory

21 Nov 2024, 09:15

Type Values Removed Values Added
References () https://helpcenter.trendmicro.com/en-us/article/tmka-19175 - () https://helpcenter.trendmicro.com/en-us/article/tmka-19175 -
References () https://www.zerodayinitiative.com/advisories/ZDI-24-576/ - () https://www.zerodayinitiative.com/advisories/ZDI-24-576/ -

03 Jul 2024, 01:57

Type Values Removed Values Added
CWE CWE-269

11 Jun 2024, 13:54

Type Values Removed Values Added
Summary
  • (es) Trend Micro Security 17.x (Consumidor) es afectado por una vulnerabilidad de escalada de privilegios que podría permitir a un atacante local eliminar involuntariamente archivos privilegiados de Trend Micro, incluido el suyo propio.

10 Jun 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-10 22:15

Updated : 2025-07-30 21:01

NVD link : CVE-2024-32849

Mitre link : CVE-2024-32849

CVE.ORG link : CVE-2024-32849

JSON object : View

Products Affected

trendmicro

  • maximum_security_2022
  • maximum_security_2023

microsoft

  • windows
CWE
CWE-269

Improper Privilege Management