CVE-2021-44023
A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.42%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service.
- CVSS 3.1
- 7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- EPSS
- 0.42% probability · 36th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-59
- Affected
- trendmicro/antivirus\+ security 2021 · trendmicro/internet security 2021 · trendmicro/maximum security 2021 · trendmicro/premium security 2021
- Source
- security@trendmicro.com
EPSS 0.4% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-10867Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1536/Third Party Advisory, VDB Entry
- https://helpcenter.trendmicro.com/en-us/article/tmka-10867Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1536/Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.