CVE-2018-18328

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6F6A offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Trend Micro	Trend Micro Antivirus for Mac (Consumer)	7.0 (2017) and above

References

http://www.securityfocus.com/bid/105757Third Party Advisory, VDB Entry
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspxVendor Advisory
https://esupport.trendmicro.com/solution/ja-jp/1121350.aspxVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-1296/Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/105757Third Party Advisory, VDB Entry
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1121296.aspxVendor Advisory
https://esupport.trendmicro.com/solution/ja-jp/1121350.aspxVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-1296/Third Party Advisory, VDB Entry

Timeline

Published: Oct 23, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-183297.8A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and abo CVE-2018-18335.3IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has alre CVE-2018-183306.5An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below could allow an attacker t CVE-2018-183317.5A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter CVE-2018-183327.5A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key file CVE-2018-183337.8A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipu CVE-2018-183347.5A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions below 3.0.1478 could allow an remote attack CVE-2018-183358.8Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a c CVE-2018-183368.8Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption CVE-2018-183378.8Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to p CVE-2018-183388.8Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit he CVE-2018-183398.8Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corrupti