CVE-2021-32460

The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a target machine. Please note than an attacker must already have local user privileges and access on the machine to exploit this vulnerability.

• CWE-732

• https://helpcenter.trendmicro.com/en-us/article/TMKA-10336Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-603/Third Party Advisory, VDB Entry
• https://helpcenter.trendmicro.com/en-us/article/TMKA-10336Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-603/Third Party Advisory, VDB Entry

Published

Jun 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32455SITEL CAP/PRX firmware version 5.2.01, allows an attacker wi…6.5
• CVE-2021-32456SITEL CAP/PRX firmware version 5.2.01 allows an attacker wit…6.5
• CVE-2021-32457Trend Micro Home Network Security version 6.6.604 and earlie…7.8
• CVE-2021-32458Trend Micro Home Network Security version 6.6.604 and earlie…7.8
• CVE-2021-32459Trend Micro Home Network Security version 6.6.604 and earlie…6.5
• CVE-2021-3246A heap buffer overflow vulnerability in msadpcm_decode_block…8.8
• CVE-2021-32461Trend Micro Password Manager (Consumer) version 5.0.0.1217 a…7.8
• CVE-2021-32462Trend Micro Password Manager (Consumer) version 5.0.0.1217 a…8.8
• CVE-2021-32463An incorrect permission assignment denial-of-service vulnera…7.8
• CVE-2021-32464An incorrect permission assignment privilege escalation vuln…7.8
• CVE-2021-32465An incorrect permission preservation vulnerability in Trend …8.8
• CVE-2021-32466An uncontrolled search path element privilege escalation vul…7