CVE-2021-36744

HIGH

Trend Micro Security 2020-2021 - Privilege Escalation and Denial of Service via Directory Junction

Title source: llm
STIX 2.1

Description

Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_misc
https://helpcenter.trendmicro.com/en-us/article/tmka-10568
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-1052/

Scores

CVSS v3 7.8
EPSS 0.0023
EPSS Percentile 45.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-59
Status published
Products (5)
trendmicro/maximum_security_2019 15.0
trendmicro/maximum_security_2020 16.0
trendmicro/maximum_security_2021 17.0
trendmicro/maximum_security_2021 17.2
trendmicro/security_for_best_buy 2021
Published Sep 06, 2021
Tracked Since Feb 18, 2026