CVE-2021-36744

CWE-59CWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.8HIGH
EPSS
0.2%
top 54.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Trend Micro Trend Micro Security (consumer)Trendmicro Maximum Security 2019Trendmicro Maximum Security 2020+2 more
Timeline
PublishedSep 6
Latest updateMay 24

Description

Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

Patches

Patch: helpcenter.trendmicro.com ↗Patch: helpcenter.trendmicro.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-569p-vmxp-hg5x: Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system↗2022-05-24
▶
CVEList
CVE-2021-36744: Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system↗2021-09-06
▶
CVE-2021-36744 (HIGH CVSS 7.8) | Trend Micro Security (Consumer) 202 | cvebase.io