CVE-2025-49385: Trend Micro Maximum Security Platinum Host Service Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Platinum Host Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49385?
CVE-2025-49385 has a high severity rating due to its potential to allow local privilege escalation.
How do I fix CVE-2025-49385?
To fix CVE-2025-49385, ensure that you install the latest security updates provided by Trend Micro for Maximum Security.
What impact does CVE-2025-49385 have on my system?
CVE-2025-49385 can allow local attackers to escalate their privileges, potentially leading to unauthorized access and control over affected systems.
Who is affected by CVE-2025-49385?
CVE-2025-49385 affects users of Trend Micro Maximum Security who have low-privileged code execution capabilities.
Can remote attackers exploit CVE-2025-49385?
No, CVE-2025-49385 requires that an attacker already has the ability to execute low-privileged code locally on the target system.