CVEvulnerability
CVE-2021-44023
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-12-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-59
Description
A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service.
Affected configurations
• trendmicro antivirus\+ security 2021 (<= 17.0)
• trendmicro internet security 2021 (<= 17.0)
• trendmicro maximum security 2021 (<= 17.0)
• trendmicro premium security 2021 (<= 17.0)
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-10867 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1536/ Third Party Advisory, VDB Entry
- https://helpcenter.trendmicro.com/en-us/article/tmka-10867 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1536/ Third Party Advisory, VDB Entry