CVE-2018-6232: Trend Micro Maximum Security tmnciesc Buffer Overflow Privilege Escalation Vulnerability
A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-6232?
CVE-2018-6232 is a vulnerability in Trend Micro Maximum Security that allows local attackers to escalate privileges on vulnerable installations.
How severe is CVE-2018-6232?
CVE-2018-6232 has a severity rating of 7.8 (out of 10).
Which software is affected by CVE-2018-6232?
Trend Micro Maximum Security versions up to and including 12.0 are affected by CVE-2018-6232.
How can CVE-2018-6232 be exploited?
An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit CVE-2018-6232.
Is Microsoft Windows affected by CVE-2018-6232?
No, Microsoft Windows is not vulnerable to CVE-2018-6232.