From c81491c9dcf5895327eb1efd9800c068635aa6cf Mon Sep 17 00:00:00 2001
From: jpattrendmicro <jonn_perez@trendmicro.com>
Date: Fri, 2 Oct 2020 14:47:46 -0700
Subject: [PATCH] Trend Micro CVE 10022020 Submission

---
 2020/25xxx/CVE-2020-25776.json | 79 ++++++++++++++++++++++++++--------
 1 file changed, 62 insertions(+), 17 deletions(-)

diff --git a/2020/25xxx/CVE-2020-25776.json b/2020/25xxx/CVE-2020-25776.json
index ec03de92268..c073e5dae09 100644
--- a/2020/25xxx/CVE-2020-25776.json
+++ b/2020/25xxx/CVE-2020-25776.json
@@ -1,18 +1,63 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
-    "CVE_data_meta": {
-        "ID": "CVE-2020-25776",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
-    },
-    "description": {
-        "description_data": [
-            {
-                "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
-            }
-        ]
-    }
-}
\ No newline at end of file
+	"CVE_data_meta" : {
+		"ASSIGNER" : "security@trendmicro.com",
+		"ID" : "CVE-2020-25776",
+		"STATE" : "PUBLIC"
+	},
+	"affects" : {
+		"vendor" : {
+			"vendor_data" : [
+				{
+					"product" : {
+						"product_data" : [
+							{
+								"product_name" : "Trend Micro Antivirus for Mac (Consumer)",
+								"version" : {
+									"version_data" : [
+										{
+											"version_value" : "2020 (v10.x)"
+										}
+									]
+								}
+							}
+						]
+					},
+					"vendor_name" : "Trend Micro"
+				}
+			]
+		}
+	},
+	"data_format" : "MITRE",
+	"data_type" : "CVE",
+	"data_version" : "4.0",
+	"description" : {
+		"description_data" : [
+			{
+				"lang" : "eng",
+				"value" : "Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a critical file on the system to escalate their privileges.\r\n\r\nAn attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
+			}
+		]
+	},
+	"problemtype" : {
+		"problemtype_data" : [
+			{
+				"description" : [
+					{
+						"lang" : "eng",
+						"value" : "Symbolic Link Privilege Escalation"
+					}
+				]
+			}
+		]
+	},
+	"references" : {
+		"reference_data" : [
+			{
+				"url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-09924"
+			},
+			{
+				"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-1236/"
+			}
+		]
+	}
+}