Skip to content
OpenAdvisories
Unscored CVE-2018-6236 EUVD-2018-17997GHSA-qmvc-m73g-v847

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker…

Published May 25, 2018 · Updated Aug 5, 2024 · Assigned by trendmicro

Description

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
Trend Micro Trend Micro Maximum Security 2018 —

References