CVE-2018-15366
HIGHTrend Micro Antivirus for Mac <7.0 - Privilege Escalation
Title source: llmDescription
A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/105757
Vendor Advisory x_refsource_confirm
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-18-1293/
Scores
CVSS v3
7.8
EPSS
0.0010
EPSS Percentile
28.1%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (3)
trendmicro/antivirus_for_mac_2017
7.0 - 7.1.1124
trendmicro/antivirus_for_mac_2018
8.0 - 8.0.3082
trendmicro/antivirus_for_mac_2019
9.0 - 9.0.1356
Published
Oct 23, 2018
Tracked Since
Feb 18, 2026