← back
CVE-2025-49385

CVE-2025-49385

CVSS 7.8 HIGHEPSS 0.1%CWE-64
Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Trend Micro, Inc. · Trend Micro Internet Security (Consumer)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://helpcenter.trendmicro.com/en-us/article/TMKA-18461https://www.zerodayinitiative.com/advisories/ZDI-25-380/