A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution.

An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

This CVE is similar, but not identical to CVE-2020-24556.

Related CVEs

CVE-2020-24562

Key Information

GHSA ID

GHSA-74vv-q3rm-9hv6

Published

May 24, 2022 5:29 PM

Last Modified

May 24, 2022 5:29 PM

CVSS Score

7.5 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: July 2, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.