CVE-2025-53503

{"id": "CVE-2025-53503", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@trendmicro.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2025-07-10T19:15:26.347", "references": [{"url": "https://helpcenter.trendmicro.com/en-us/article/tmka-12951", "tags": ["Vendor Advisory"], "source": "security@trendmicro.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@trendmicro.com", "description": [{"lang": "en", "value": "CWE-64"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own."}, {"lang": "es", "value": "Trend Micro Cleaner One Pro es afectado por una vulnerabilidad de escalada de privilegios que podr\u00eda permitir que un atacante local elimine sin querer archivos privilegiados de Trend Micro, incluidos los suyos propios."}], "lastModified": "2025-10-03T00:44:15.323", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:cleaner_one:*:*:*:*:pro:windows:*:*", "vulnerable": true, "matchCriteriaId": "7D97E3FA-9AB1-4445-97FC-A84FD42DC426", "versionEndExcluding": "6.8.333"}], "operator": "OR"}]}], "sourceIdentifier": "security@trendmicro.com"}