CVE-2022-24671

CVE-2022-24671 is a local privilege-escalation vulnerability in Trend Micro Antivirus for Mac. The flaw resides in the post-update handling (program_after_update) where an attacker can abuse symbolic links to modify a file during the update process, enabling privilege escalation to root if low-pr...

CVE-2021-25227

Trend Micro Antivirus for Mac 2021 (Consumer) is affected by a memory exhaustion vulnerability causing a denial of service that can disable scanning. The issue stems from an input handling flaw in the iCoreService binary, requiring local access with low-privilege code and user interaction (visiti...

CVE-2020-25776

Trend Micro Antivirus for Mac 2020 (Consumer) has a local, privilege-escalation vulnerability (CVE-2020-25776) due to a symbolic link flaw in the iTISPlugin module. An attacker who can run low-privileged code could craft a symbolic link to escalate to root and access/modify protected files. The v...

CVE-2020-27014

Trend Micro Antivirus for Mac 2020 (Consumer) is affected by a local race-condition vulnerability in the Web Threat Protection Blocklist. The flaw, exploitable by an attacker with high-privilege code execution, can trigger a kernel panic/crash (local privilege escalation via the KERedirect kext)....

CVE-2020-27013

Trend Micro Antivirus for Mac 2020 (Consumer) exposes an API via a local webserver for which an API with read/write properties can be accessed by a local, low-privilege attacker who has already compromised the target. The vulnerability arises from improper access control on the iCoreService endpo...

CVE-2019-19695

CVE-2019-19695 affects Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below). The provided sources describe a privilege escalation where an attacker could create a symbolic link to a target file and modify it. The primary documented impact is on integrity via modification of the targeted file,...

CVE-2020-25777

CVE-2020-25777 affects Trend Micro Antivirus for Mac 2020 (Consumer). A vulnerability in the kernel extension request flow allows bypassing the product's Web Threat Protection. The exploit requires user interaction (visiting a malicious page or opening a malicious file). The specific flaw is desc...

CVE-2020-25779

CVE-2020-25779 affects Trend Micro Antivirus for Mac 2020 (Consumer); a Internationalized Domain Name homograph (Puny-code) vulnerability could allow adding a malicious site to the approved websites list, bypassing web threat protection. Root cause: IDN homograph misuse. Exploitation details and ...

CVE-2020-25778

CVE-2020-25778 affects Trend Micro Antivirus for Mac 2020 (Consumer). The issue is in a kernel extension (KERedirect kext) where an attacker who can run high-privileged code locally can supply a kernel pointer to leak memory and disclose sensitive information. ZDI notes the flaw enables local dis...

CVE-2020-27015

CVE-2020-27015 affects Trend Micro Antivirus for Mac 2020 (Consumer). The flaw is an error message information disclosure in the KERedirect kext that can leak kernel pointers and debug messages to userland when an attacker already has high-privilege code execution locally. Exploitation is local a...

CVE-2021-28648

Trend Micro Antivirus for Mac (2020 v10.5 and 2021 v11 Consumer) is affected by an improper access control privilege escalation in the com.trendmicro.AFM.HelperTool component. The root cause is improper access control that could allow a local attacker who can run low-privileged code to establish ...

CVE-2021-43771

CVE-2021-43771 affects Trend Micro Antivirus for Mac 2021 v11 (Consumer). Root cause is improper access control in the application, specifically within com.trendmicro.AFM.HelperTool, enabling local privilege escalation after an attacker gains the ability to run low-privileged code. Exploitation i...