CVE-2025-52837

Trend Micro Password Manager Consumer version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportunity to abuse symbolic links and other methods to delete any file/folder and achieve privilege escalation...

CVE-2025-52837

CVE-2025-52837 affects Trend Micro Password Manager (Consumer) on Windows, specifically versions 5.8.0.1327 and earlier. The root cause is a Link Following vulnerability (notably via symbolic links) that can be leveraged to delete arbitrary files/folders and escalate privileges. The vulnerability...

CVE-2025-52521

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-52521

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-52521

CVE-2025-52521 affects Trend Micro Security 17.8 (Consumer). The flaw is a link-following local privilege escalation that lets a local attacker delete privileged Trend Micro files, including the software itself. Public technical details from ZDI indicate the issue lies in the Regain Disk Space fu...

CVE-2025-52521

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-53503: Windows Shortcut Following (.LNK)

Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

Trend Micro Password Manager 安全漏洞

Trend Micro Password Manager is an application for managing website passwords and login IDs from Trend Micro. A security vulnerability exists in Trend Micro Password Manager version 5.8.0.1327 and prior versions, which stems from a link-following vulnerability that could lead to elevation of...

Trend Micro Worry-Free Business Security Services 访问控制错误漏洞

Trend Micro Worry-Free Business Security Services is an endpoint security solution from Trend Micro, Inc. A security vulnerability exists in Trend Micro Worry-Free Business Security Services that stems from a lack of authentication and could allow an unauthenticated attacker to remotely control a...

Trend Micro Security 安全漏洞

Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security version 17.8, which stems from a link-following vulnerability that could lead to elevated privileges...

CVE-2025-52521: Windows Shortcut Following (.LNK)

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-53378: Missing Authentication for Critical Function

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services WFBSS agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only affected the SaaS client version of WFBSS only...

CVE-2025-52837: Windows Shortcut Following (.LNK)

Trend Micro Password Manager Consumer version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportunity to abuse symbolic links and other methods to delete any file/folder and achieve privilege escalation...

PT-2025-28806 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security version 17.8 Description: Trend Micro Security 17.8 Consumer contains a link following local privilege escalation issue. A local attacker could unintentionally delete privileged Trend Micro files, including the software...

Trend Micro Maximum Security Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Trend Micro Password Manager Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Password Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Tre...

Windows shortcut following (.LNK) vulnerability in Trend Micro Security for Windows (CVE-2025-52521)

Overview Trend Micro Incorporated has released a security update for Trend Micro Security for Windows CVE-2025-52521. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact Arbitrary files or folders may be deleted due to a windows...

PT-2025-53548

Уязвимость программного обеспечения для очистки и оптимизации системы Trend Micro Cleaner One Pro связана с ошибками при обработке файлов с расширением .LNK ярлыков. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии и получить доступ на удаление файлов...

PT-2025-29146

Name of the Vulnerable Software and Affected Versions: Trend Micro Cleaner One Pro affected versions not specified Description: Trend Micro Cleaner One Pro is susceptible to a privilege escalation issue. A local attacker may unintentionally delete privileged Trend Micro files, including its own...

Multiple vulnerabilities in Trend Micro Password Manager for Windows (CVE-2025-48443, CVE-2025-52837)

Overview Trend Micro Incorporated has released a security update for Trend Micro Password Manager for Windows. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Arbitrary files may be deleted during the product installation d...