LIVE · cybersecurity feed
Live wire

local vulnerability

trend microhigh

ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been discovered in Trend Micro VPN's OpenSSL configuration. Attackers with low-privileged code execution can exploit this by leveraging an unsecured configuration file location to escalate privileges and run arbitrary code as SYSTEM. Trend Micro has released an update to address this issue.