CVE-2022-48191: Trend Micro Maximum Security Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Damage Cleanup Engine. The issue results from the lack of proper locking when performing file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2022-48191.
What is the title of this vulnerability?
The title of this vulnerability is Trend Micro Maximum Security Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability.
What is the severity rating of CVE-2022-48191?
The severity rating of CVE-2022-48191 is 7.8 (high).
How can this vulnerability be exploited?
This vulnerability can be exploited by local attackers who have the ability to execute low-privileged code on the target system.
Is Microsoft Windows affected by this vulnerability?
No, Microsoft Windows is not vulnerable to this specific vulnerability.