| CVE ID | CVE-2025-53378 |
| CVSS SCORE | 7.6, AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H |
| AFFECTED VENDORS |
Trend Micro |
| AFFECTED PRODUCTS |
Worry-Free Business Security |
| VULNERABILITY DETAILS |
This vulnerability allows remote attackers to hijack security agents on affected installations of Trend Micro Worry-Free Business Security. In most cases, user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the agent activation API. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to remove protections or create a denial-of-service condition on the system. |
| ADDITIONAL DETAILS |
Trend Micro has issued an update to correct this vulnerability. More details can be found at:
https://success.trendmicro.com/en-US/solution/KA-0019936 |
| DISCLOSURE TIMELINE |
|
| CREDIT | Nicolas Caluori |
