Trend Micro Maximum Security Link Following Local Privilege Escalation Vulnerability

A link following local privilege escalation vulnerability has been identified in Trend Micro Maximum Security version 17.8. This vulnerability allows local attackers to unintentionally delete privileged Trend Micro files, including those belonging to the application itself. The issue arises within the Platinum Host Service, where symbolic links can be created to manipulate the service into deleting files. Exploiting this vulnerability could enable attackers to escalate privileges and execute arbitrary code with SYSTEM rights.

Impact

Exploitation of this vulnerability allows local attackers to escalate privileges, potentially leading to the execution of arbitrary code in the context of the SYSTEM user.

Remediation

Trend Micro has released a patch for this vulnerability in version 17.8.1464 of Maximum Security. Users are advised to update to this version.