CVE-2018-15366 - A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations

Back Back to CVE browser

HIGH

A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations

Published Oct 23, 2018

7.8

HIGH

CVSS 3.0

EPSS 0.54%

Description

A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

Vendor Trend Micro Product Trend Micro Antivirus for Mac (Consumer) Default
n/a
- Version
  7.0 (2017) and above
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro

Trend Micro Antivirus for Mac (Consumer)

n/a

Version	Status	Constraints
7.0 (2017) and above	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (4)

http://www.securityfocus.com/bid/105757
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx
x_refsource_CONFIRMVendor Advisory
https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx
x_refsource_CONFIRMVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-1293/
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.securityfocus.com/bid/105757		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspx		x_refsource_CONFIRMVendor Advisory
https://esupport.trendmicro.com/solution/ja-jp/1121350.aspx		x_refsource_CONFIRMVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-1293/		x_refsource_MISCThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trendmicro

Published Oct 23, 2018

Updated Aug 5, 2024

Reserved Aug 16, 2018

Link CVE-2018-15366

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-15366

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-15366