ZDI-CAN-25572: ZDI-25-201: Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the vulnerability is triggered only when an administrator performs an install of the product. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-27529.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25572?
The severity of ZDI-CAN-25572 is significant as it allows local attackers to create a denial-of-service condition on affected systems.
How do I fix ZDI-CAN-25572?
To fix ZDI-CAN-25572, ensure you update to the latest version of Trend Micro Cleaner One Pro that addresses this vulnerability.
Who is affected by ZDI-CAN-25572?
ZDI-CAN-25572 affects installations of Trend Micro Cleaner One Pro on systems where low-privileged code execution is possible.
What type of attack does ZDI-CAN-25572 enable?
ZDI-CAN-25572 enables a denial-of-service attack condition when exploited by a local attacker.
What must an attacker do to exploit ZDI-CAN-25572?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-CAN-25572.