← Back

CVE-2025-48443

nvd nist
Published: Jun 17, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.6
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Exploitability: 1.3 / Impact: 5.2
Source: NVD

Description

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend Micro Password Manager.

Affected (1)

Trendmicro
1 product
Password Manager
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Password Manager
Before 5.8.0.1330

Related CWEs

CWE-64
Windows Shortcut Following (.LNK)
The product, when opening a file or directory, does not sufficiently handle when the file is a Windows shortcut (.LNK) whose target is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.

References (2)

Source: security@trendmicro.com
Vendor Advisory
Source: security@trendmicro.com
Third Party Advisory

Timeline

No history available yet.