A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-crafted file as a symlink that can lead to privilege escalation. Please note that an attacker must at least have low-level privileges on the system to attempt to exploit this vulnerability.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
| Link | Tags |
|---|---|
| https://helpcenter.trendmicro.com/en-us/article/tmka-10978 | vendor advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-22-546/ | third party advisory vdb entry |