CVE-2025-48443: trend micro, inc. trend micro password manager Windows Shortcut Following (.LNK)

Vulnerability summary

CVE-2025-48443 is a medium (CVSS 6.7) Windows Shortcut Following (.LNK) vulnerability in trend micro, inc. trend micro password manager. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.7% of scored vulnerabilities.

Timeline

1. 17-06-2025
   PublishedVulnerability first disclosed.
2. 18-06-2025
   Last modifiedVulnerability information updated.

Description

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend Micro Password Manager.

• CWE-64Windows Shortcut Following (.LNK)The product, when opening a file or directory, does not sufficiently handle when the file is a Windows shortcut (.LNK) whose target is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.