CVE-2018-15367

A ctlset KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac Consumer 7.0 2017 and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged co...

CVE-2018-15367

CVE-2018-15367 is tied to a kernel‑level privilege escalation in Trend Micro Antivirus for Mac (Consumer) v7.0+ via the ctl_set KERedirect vulnerability. The ZDI advisory states the flaw occurs in the ctl_set KERedirect kext and stems from lack of validation of a user‑supplied value before it is ...