CVE-2025-48443

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend Micro Password Manager.

Score

CVSS 3.1 6.7 Medium

Status

Analyzed - security@trendmicro.com

Published

2025-06-17

Last modified

2025-06-18

Weaknesses

CWE-64

Affected products

• Password Manager (Trendmicro)

References

• https://helpcenter.trendmicro.com/en-us/article/TMKA-12917
• https://www.zerodayinitiative.com/advisories/ZDI-25-361/