ZDI-CAN-27644: ZDI-25-1125: Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability

Published Dec 17, 2025

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-53503.

Affected Software

1 affected component

Trend Micro Cleaner One Pro

Event History

Dec 17, 2025

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-27644?

ZDI-CAN-27644 has been assigned a high severity rating due to its potential for local privilege escalation.

How do I fix ZDI-CAN-27644?

To remediate ZDI-CAN-27644, ensure you apply the latest security updates or patches provided by Trend Micro for Cleaner One Pro.

Who is affected by ZDI-CAN-27644?

ZDI-CAN-27644 affects installations of Trend Micro Cleaner One Pro where local attackers can exploit the vulnerability.

Can ZDI-CAN-27644 be exploited remotely?

No, ZDI-CAN-27644 requires the attacker to have local access to the system to exploit the vulnerability.

What type of attacks can ZDI-CAN-27644 enable?

ZDI-CAN-27644 enables local attackers to escalate their privileges on the affected system.