CVE-2021-28648: trend micro trend micro antivirus for mac
Vulnerability summary
CVE-2021-28648 is a high (CVSS 7.8) vulnerability in trend micro trend micro antivirus for mac. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.5% of scored vulnerabilities.
Timeline
- 22-04-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.53%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
0.00 pp
From 0.53% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Trend micro1 product
- trend micro antivirus for mac2021 (11), 2020 (10.5)
Trendmicro1 product
- antivirus≥ 10.5, < 10.5.2088 | ≥ 11.0, < 11.0.2062
2 vendors · 2 products