Vulnerability · Published Jan 18, 2023 · Assigned by trendmicro
CVE-2022-48191
High 7.0
In plain English
A high-severity security flaw in Trend Micro Maxium Security (Consumer) from Trend Micro, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Official description
A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro, Inc. | Trend Micro Maxium Security (Consumer) | 2022 (17.7) – before 17.7 |
Weakness: CWE-367 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H