JVNDB-2025-007390

Trend Micro Internet Security and Trend Micro Maximum Security vulnerable to link following local privilege escalation (CVE-2025-49384, CVE-2025-49385)

Trend Micro Incorporated has released security updates for Trend Micro Internet Security and Trend Micro Maximum Security that contains a fix for a link following local privilege escalation vulnerability (CVE-2025-49384, CVE-2025-49385).

Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.

Trend Micro, Inc.

• Trend Micro Maximum Security versions prior to 17.8.1464
• Trend Micro Internet Security versions prior to 17.8.1464

Arbitrary file or folder may be deleted by a local attacker.

[Update the software]
Update the software to the latest version.
According to the developer, the updates are automatically applied via ActiveUpdate.

Trend Micro, Inc.

• Trend Micro : Trend Micro Internet Security Link Following Local Privilege Escalation Vulnerability
• Trend Micro : Trend Micro Maximum Security Link Following Local Privilege Escalation Vulnerability

1. CVE-2025-49384
2. CVE-2025-49385

1. JVN : JVNVU#99381846

• [2025/06/24]
    Web page was published