CVE detail
CVE-2025-30640
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 11.0 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
2 source links · newest first
- https://www.zerodayinitiative.com/advisories/ZDI-25-239/www.zerodayinitiative.com
No excerpt available.
Exploitwww.zerodayinitiative.comJun 17, 2025, 9:15 PM - https://success.trendmicro.com/en-US/solution/KA-0019344success.trendmicro.com
No excerpt available.
Vendor Advisorysuccess.trendmicro.comJun 17, 2025, 9:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-30642CVSS 5.5 · Medium
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on affected installations. Pl…
- CVE-2025-30641CVSS 7.8 · High
A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected instal…
- CVE-2022-40710CVSS 7.8 · High
A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected…
- CVE-2026-50526CVSS 7.0 · High
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
- CVE-2026-6851CVSS 7.0 · High
An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows…
- CVE-2026-45491CVSS 6.2 · Medium
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.