CVE-2018-18328

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac Consumer 7.0 2017 and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6F6A offse...

CVE-2018-18328

CVE-2018-18328 affects Trend Micro Antivirus for Mac (Consumer) versions 7.0 (2017) and newer. The root cause is a KERedirect untrusted pointer dereference due to a lack of proper validation of a user‑supplied buffer at offset 0x6F6A, leading to a privilege escalation. An attacker must first gain...