HIGH🇵🇱 Wersja polska

CVE-2025-52837

CVSS 7.8v3.1pub. 2025-07-10upd. 2025-10-03

Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportunity to abuse symbolic links and other methods to delete any file/folder and achieve privilege escalation.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Trendmicro Password Manager

    APP
    Trendmicro
    < 5.8.0.1330
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2016-3987CRITICAL9.8ten sam produkt

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via th...

CVE-2022-28394HIGH7.8ten sam produkt

EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided ...

CVE-2022-30523HIGH7.8ten sam produkt

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privile...

CVE-2022-26337HIGH7.8ten sam produkt

Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolle...

CVE-2021-32461HIGH7.8ten sam produkt

Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Pr...