CVE-2025-52521 - Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own

Back Back to CVE browser

HIGH

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own

Published Jul 10, 2025

7.8

HIGH

CVSS 3.1

EPSS 0.36%

Description

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.

Affected products

Vendor Trend Micro, Inc. Product Trend Micro Security (Consumer) Default
n/a
- Version
  17.8
  Status
  affected
  Constraints
  <17.8.1476

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro, Inc.

Trend Micro Security (Consumer)

n/a

Version	Status	Constraints
17.8	affected	<17.8.1476

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-64

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21040
Advisory
https://helpcenter.trendmicro.com/en-us/article/tmka-18876
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-25-585/
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21040		Advisory
https://helpcenter.trendmicro.com/en-us/article/tmka-18876		Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-25-585/		Third Party Advisory