CVE-2018-6236: Trend Micro Maximum Security tmusa Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-6236?
CVE-2018-6236 is a vulnerability found in Trend Micro Maximum Security, which allows local attackers to escalate privileges.
How severe is the CVE-2018-6236 vulnerability?
CVE-2018-6236 has a severity value of 7, indicating a high severity.
What is the affected software by CVE-2018-6236?
The affected software includes Trend Micro Maximum Security versions up to and including 12.0.
How can the CVE-2018-6236 vulnerability be exploited?
The vulnerability can be exploited by first gaining the ability to execute low-privileged code on the target system.
Where can I find more information about CVE-2018-6236?
You can find more information about CVE-2018-6236 on the official Trend Micro support page and the Zero Day Initiative advisory page.