CVE-2025-53503
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-07-10
Last updated on: 2025-10-03
Assigner: Trend Micro, Inc.
Description
Description
Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| trendmicro | cleaner_one | to 6.8.333 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-64 | The product, when opening a file or directory, does not sufficiently handle when the file is a Windows shortcut (.LNK) whose target is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files. |
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Trend Micro Cleaner One Pro is a Privilege Escalation issue that allows a local attacker to unintentionally delete privileged Trend Micro files, including the application's own files.
How can this vulnerability impact me? :
The vulnerability can lead to significant impact including the deletion of important privileged files, potentially causing the application to malfunction or be compromised. This can result in loss of data integrity, availability, and could allow further exploitation due to the elevated privileges.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70