CVE-2025-48443

Severity: medium (CVSS 6.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-17 · updated 2026-06-17
Weakness: CWE-64

Description

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend Micro Password Manager.

Affected products

Trend Micro Password Manager: before 5.8.0.1330 — fixed in 5.8.0.1330

How to fix

Upgrade to a fixed version: Trend Micro Password Manager 5.8.0.1330. Check the vendor advisory for mitigations.

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-12917
https://www.zerodayinitiative.com/advisories/ZDI-25-361/

Get alerted when CVE-2025-48443 or the next vulnerability affects your stack