CVE Vulnerabilities

CVE-2021-28648

Published: Apr 22, 2021 | Modified: Jun 28, 2022
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

Affected Software

Name Vendor Start Version End Version
Antivirus Trendmicro 10.5 (including) 10.5.2088 (excluding)
Antivirus Trendmicro 11.0 (including) 11.0.2062 (excluding)

References