Analysis Summary

CVE-2025-4613

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Platinum Host Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

Impact

• Code Execution
• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2025-4613

Affected Vendors

Remediation

Refer to Trend Micro Security Advisory for patch, upgrade, or suggested workaround information.

Trend Micro Security Advisory