CVE-2024-32849

Katalog CVE

CVSS 7.8 · High EPSS 0,26%

Kerentanan Improper Privilege Management pada trendmicro maximum security 2022, trendmicro maximum security 2023. Skor CVSS 3.1 7.8 (High) menurut trendmicro.com.

Deskripsi (NVD)

Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.

Rincian

Terbit di NVD

10 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber trendmicro.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 15,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpcenter.trendmicro.com/en-us/article/tmka-19175 advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-24-576/ advisory pihak ketiga