CVE-2018-15366: Trend Micro Anti-Virus UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation Vulnerability
A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Anti-Virus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the UrlfWTPPagePtr variable in the KERedirect kext. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the kernel.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-15366?
CVE-2018-15366 has a medium severity level, indicating it poses a moderate risk of exploitation.
How do I fix CVE-2018-15366?
To fix CVE-2018-15366, update Trend Micro Antivirus for Mac to the latest version available.
Which products are affected by CVE-2018-15366?
CVE-2018-15366 affects Trend Micro Antivirus for Mac versions 7.0 and above.
Can CVE-2018-15366 be exploited remotely?
CVE-2018-15366 requires local access for exploitation, meaning an attacker must have physical or local access to the system.
What kind of vulnerability is CVE-2018-15366?
CVE-2018-15366 is classified as a 'Use-After-Free' privilege escalation vulnerability.