CVE-2014-9641

CVE-2014-9641 describes a local privilege escalation vulnerability in the tmeext.sys driver (versions prior to 2.0.0.1015) found in Trend Micro Antivirus Plus, Internet Security, and Maximum Security products. An attacker can exploit this by crafting a specific IOCTL call (0x00222400) to write to arbitrary memory locations. This vulnerability carries a CVSS score of 7.2, indicating high severity due to its potential for complete compromise of confidentiality, integrity, and availability from a local attacker with low attack complexity. While not listed on the KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.