Severity
High
Analysis Summary
CVE-2025-4613
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Platinum Host Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Impact
- Code Execution
- Privilege Escalation
Indicators of Compromise
CVE
CVE-2025-4613
Affected Vendors
Trend Micro
Affected Products
- Trend Micro Maximum Security - 17.8
Remediation
Refer to Trend Micro Security Advisory for patch, upgrade, or suggested workaround information.