Описание
A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
Ссылки
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 12.0 (включая)Версия до 12.0 (включая)Версия до 12.0 (включая)Версия до 12.0 (включая)
Одновременно
Одно из
cpe:2.3:a:trendmicro:antivirus_\+_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:*
cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00059
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
EPSS
Процентиль: 18%
0.00059
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-502