The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges.
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
| Link | Tags |
|---|---|
| https://helpcenter.trendmicro.com/en-us/article/TMKA-09909 | vendor advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-20-1227/ | third party advisory vdb entry |