CVE-2022-36336

2022-07-2923:15:34

trendmicro

www.cve.org

0.0004 Low

EPSS

Percentile

16.1%

JSON

A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations. The resolution for this issue has been deployed automatically via ActiveUpdate to customers in an updated Spyware pattern. Customers who are up-to-date on detection patterns are not required to take any additional steps to mitigate this issue.

CNA Affected

[
  {
    "product": "Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019 and SaaS"
      }
    ]
  },
  {
    "product": "Trend Micro Worry-Free Business Security",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "10.0 SP1 and SaaS"
      }
    ]
  }
]

References

success.trendmicro.com/solution/000291267

www.zerodayinitiative.com/advisories/ZDI-22-1033/

0.0004 Low

EPSS

Percentile

16.1%

JSON

Related for CVELIST:CVE-2022-36336