ZDI-25-201: Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the vulnerability is triggered only when an administrator performs an install of the product. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-27529.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-201?
The severity of ZDI-25-201 is considered to be high due to its ability to allow local attackers to create a denial-of-service condition.
How do I fix ZDI-25-201?
To fix ZDI-25-201, ensure that you update Trend Micro Cleaner One Pro to the latest version provided by Trend Micro.
Who is affected by the ZDI-25-201 vulnerability?
Users of Trend Micro Cleaner One Pro are affected by the ZDI-25-201 vulnerability.
What type of attack does ZDI-25-201 involve?
ZDI-25-201 involves a local denial-of-service attack where an attacker must execute low-privileged code on the target system.
What should I do if I am unable to update Trend Micro Cleaner One Pro for ZDI-25-201?
If you cannot update, consider temporarily disabling the software to mitigate the risk until the update can be applied.