CVE-2025-49384

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:trendmicro:maximum_security_2022:17.8:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

26 Aug 2025, 19:39

Type Values Removed Values Added
CPE cpe:2.3:a:trendmicro:maximum_security_2022:17.8:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
References () https://helpcenter.trendmicro.com/en-us/article/TMKA-11112 - () https://helpcenter.trendmicro.com/en-us/article/TMKA-11112 - Vendor Advisory
Summary
  • (es) Trend Micro Security 17.8 (Consumer) es afectado por una vulnerabilidad de escalada de privilegios locales que sigue un enlace que podría permitir a un atacante local eliminar de manera involuntaria archivos privilegiados de Trend Micro, incluidos los suyos propios.
First Time Microsoft windows
Microsoft
Trendmicro maximum Security 2022
Trendmicro

17 Jun 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-17 21:15

Updated : 2025-08-26 19:39


NVD link : CVE-2025-49384

Mitre link : CVE-2025-49384

CVE.ORG link : CVE-2025-49384


JSON object : View

Products Affected

trendmicro

  • maximum_security_2022

microsoft

  • windows
CWE
CWE-64

Windows Shortcut Following (.LNK)