Vulnerability Description
A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Antivirus For Mac 2017 | >= 7.0, <= 7.1.1124 |
| Trendmicro | Antivirus For Mac 2018 | >= 8.0, <= 8.0.3082 |
| Trendmicro | Antivirus For Mac 2019 | >= 9.0, <= 9.0.1356 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105757Third Party AdvisoryVDB Entry
- https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspxVendor Advisory
- https://esupport.trendmicro.com/solution/ja-jp/1121350.aspxVendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-18-1293/Third Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/105757Third Party AdvisoryVDB Entry
- https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspxVendor Advisory
- https://esupport.trendmicro.com/solution/ja-jp/1121350.aspxVendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-18-1293/Third Party AdvisoryVDB Entry
FAQ
What is CVE-2018-15366?
CVE-2018-15366 is a vulnerability with a CVSS score of 7.8 (HIGH). A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vu...
How severe is CVE-2018-15366?
CVE-2018-15366 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-15366?
Check the references section above for vendor advisories and patch information. Affected products include: Trendmicro Antivirus For Mac 2017, Trendmicro Antivirus For Mac 2018, Trendmicro Antivirus For Mac 2019.