What’s Vulnerable › Vulnerabilities

CVE-2021-28648

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-22 · updated 2026-06-17

Description

Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

Affected products

• Trend Micro Antivirus for Mac (Consumer): from 10.5 before 10.5.2088; from 11.0 before 11.0.2062 — fixed in 10.5.2088, 11.0.2062

How to fix

Upgrade to a fixed version: Trend Micro Antivirus for Mac (Consumer) 10.5.2088, 11.0.2062. Check the vendor advisory for mitigations.

References

• https://helpcenter.trendmicro.com/en-us/article/TMKA-10293
• https://www.zerodayinitiative.com/advisories/ZDI-21-420/
• https://helpcenter.trendmicro.com/en-us/article/TMKA-10293
• https://www.zerodayinitiative.com/advisories/ZDI-21-420/

Get alerted when CVE-2021-28648 or the next vulnerability affects your stack