First published: Fri Oct 02 2020(Updated: )
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the iTISPlugin module. By creating a symbolic link, an attacker can abuse the product to loosen permissions on a local file. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of root.
Credit: security@trendmicro.com
Affected Software | Affected Version | How to fix |
---|---|---|
Trendmicro Antivirus | =2019 | |
Trendmicro Antivirus | =2020 | |
Trend Micro Antivirus for Mac |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-25776 is a vulnerability in Trend Micro Antivirus for Mac that allows local attackers to escalate privileges on affected installations.
CVE-2020-25776 allows attackers with low-privileged code execution ability to escalate privileges on the target system.
CVE-2020-25776 has a severity rating of 7.8, which is considered high.
To fix CVE-2020-25776, it is recommended to update to the latest version of Trend Micro Antivirus for Mac.
More information about CVE-2020-25776 can be found on the official Trend Micro help center and Zero Day Initiative advisory websites.