PT-2021-17884

CVE-2021-28648

·

Published

2021-04-15

·

Updated

2021-04-29

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Trend Micro Antivirus for Mac versions 10.5 through 11
Description: The issue is related to an improper access control privilege escalation that could allow an attacker to establish a connection, potentially leading to full local privilege escalation within the application. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue.
Recommendations: For versions 10.5 and 11, update to a version that includes the fix for the improper access control privilege escalation issue to prevent potential exploitation.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
ZDI-21-420
Found an issue in the description? Have something to add? Feel free to write us 👾