CVE-2025-49385

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.

Score

CVSS 3.1 7.8 High

Status

Analyzed - security@trendmicro.com

Published

2025-06-17

Last modified

2025-06-18

Weaknesses

CWE-64

Affected products

• Maximum Security 2022 (Trendmicro)

References

• https://helpcenter.trendmicro.com/en-us/article/TMKA-18461
• https://www.zerodayinitiative.com/advisories/ZDI-25-380/