CVE-2022-27883: Trend Micro Antivirus for Mac Link Following Privilege Escalation Vulnerability
A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-crafted file as a symlink that can lead to privilege escalation. Please note that an attacker must at least have low-level privileges on the system to attempt to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the libTmUtil dylib. By creating a symbolic link, an attacker can abuse the product to loosen permissions on a local file. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-27883?
CVE-2022-27883 is a vulnerability in Trend Micro Antivirus for Mac that allows local attackers to escalate privileges on affected installations.
How can an attacker exploit CVE-2022-27883?
To exploit CVE-2022-27883, an attacker must first obtain the ability to execute low-privileged code on the target system.
What is the severity level of CVE-2022-27883?
The severity level of CVE-2022-27883 is high.
How can I fix CVE-2022-27883?
To fix CVE-2022-27883, update Trend Micro Antivirus for Mac to version 11.5 or later.
Where can I find more information about CVE-2022-27883?
You can find more information about CVE-2022-27883 at the following references: - [Trend Micro Help Center](https://helpcenter.trendmicro.com/en-us/article/tmka-10978) - [Zero Day Initiative Advisory](https://www.zerodayinitiative.com/advisories/ZDI-22-546/)