CVE Vulnerabilities

CVE-2024-32849

Improper Privilege Management

Published: Jun 10, 2024 | Modified: Jul 30, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

NameVendorStart VersionEnd Version
Maximum_security_2022Trendmicro17.0 (including)17.7 (excluding)
Maximum_security_2023Trendmicro17.0 (including)17.7 (excluding)

Potential Mitigations

References