Vulnerabilities > CVE-2021-32460 - Incorrect Authorization vulnerability in Trendmicro Maximum Security 2021 17.0

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
trendmicro
CWE-863

Summary

The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a target machine. Please note than an attacker must already have local user privileges and access on the machine to exploit this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Trendmicro
1
OS
Microsoft
1

Common Weakness Enumeration (CWE)