CVE-2018-10514

CWE-269 — Improper Privilege Management3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 80.94%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Trendmicro Antivirus \+ Security Trendmicro Internet Security Trendmicro Maximum Security +2 more

Timeline

PublishedAug 30

Latest updateMay 13

Description

A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶CVEListV5trend_micro/trend_micro_security_(consumer)12.0 (2018)

▶NVDtrendmicro/maximum_security12.0

▶NVDtrendmicro/premium_security12.0

▶NVDtrendmicro/internet_security12.0

▶NVDtrendmicro/antivirus_\+_security12.0

🔴Vulnerability Details

GHSA

GHSA-8q5r-g677-rp27: A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate p↗2022-05-13

▶

CVEList

CVE-2018-10514: A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate p↗2018-08-30

▶