CVE-2022-48191: Trend Micro Maximum Security Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
First published: Wed Jan 18 2023(Updated: )
A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro Maximum Security | ||
| Trendmicro Maximum Security 2022 | =17.7 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2022-48191.
What is the title of this vulnerability?
The title of this vulnerability is Trend Micro Maximum Security Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability.
What is the severity rating of CVE-2022-48191?
The severity rating of CVE-2022-48191 is 7.8 (high).
How can this vulnerability be exploited?
This vulnerability can be exploited by local attackers who have the ability to execute low-privileged code on the target system.
Is Microsoft Windows affected by this vulnerability?
No, Microsoft Windows is not vulnerable to this specific vulnerability.
- collector/nvd-index
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/title
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-23-053
- alias/ZDI-CAN-18291
- alias/CVE-2022-48191
- agent/software-canonical-lookup
- agent/tags
- agent/event
- agent/trending
- vendor/trendmicro
- canonical/trendmicro maximum security 2022
- version/trendmicro maximum security 2022/17.7
- vendor/microsoft
- canonical/microsoft windows
- vendor/trend micro
- canonical/trend micro maximum security