CVE-2021-32460: Trend Micro Maximum Security Improper Access Control Privilege Escalation Vulnerability
The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a target machine. Please note than an attacker must already have local user privileges and access on the machine to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Maximum Security console. The product sets incorrect permissions on a sensitive file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-32460?
CVE-2021-32460 is a vulnerability in Trend Micro Maximum Security that allows local attackers to escalate privileges on affected installations of the software.
How does CVE-2021-32460 work?
An attacker must first obtain the ability to execute low-privileged code on the target system and then exploit this vulnerability to escalate privileges.
What is the severity of CVE-2021-32460?
The severity of CVE-2021-32460 is high, with a CVSS score of 7.8.
Which versions of Trend Micro Maximum Security are affected by CVE-2021-32460?
The vulnerability affects Trend Micro Maximum Security 2021 version 17.0.
How can I fix CVE-2021-32460?
To fix CVE-2021-32460, it is recommended to update Trend Micro Maximum Security to the latest version.