Analysis Summary

CVE-2025-48443 CVSS:6.7

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Password Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the vulnerability is triggered only when an administrator performs an install of the product. The specific flaw exists within the product installer. By creating a junction, an attacker can abuse the installer to delete an arbitrary file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

CVE-2025-49487 CVSS:6.8

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Trend Micro Worry-Free Business Security. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The process loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.

Impact

• Code Execution
• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2025-49487

• CVE-2025-48443

Affected Vendors

Remediation

Refer to Trend Micro Security Advisory for patch, upgrade, or suggested workaround information.

CVE-2025-49487

CVE-2025-48443