Trend Micro Deep Security Link Following Local Privilege Escalation Vulnerability

A link following vulnerability has been identified in Trend Micro Deep Security Agent version 20.0, prior to 20.0.1-25770, on Windows. This vulnerability allows local attackers to escalate privileges on affected systems. To exploit this issue, an attacker must first have the ability to execute low-privileged code on the target machine.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to execute arbitrary code with SYSTEM rights.

Remediation

Users are advised to update to Trend Micro Deep Security Agent version 20.0.1-25770 or later. This update is available now. For additional guidance, consult the Trend Micro Download Center.