PT-2025-25237 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: The issue is related to an uncontrolled search path vulnerability in the Data Loss Prevention module, which could allow an attacker to inject malicious code. This could lead to...

PT-2024-28663 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. To exploit this vulnerability, an...

Trend Micro Apex One modOSCE SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is required to exploit this vulnerability. The specific flaw exists within the client management functionality. The issue results from the lack of proper validati...

The vulnerability of the ApexOne Security Agent for antivirus software from Trend Micro’s Apex One and Apex One as a Service allows attackers to execute arbitrary code and gain elevated privileges.

The vulnerability of the ApexOne Security Agent in antivirus software products Trend Micro Apex One and Apex One as a Service is related to deficiencies in access control for the Suspect folder. Exploiting this vulnerability can allow attackers to execute arbitrary code and increase their...

Malicious code in lita_onewheel-beer-apex (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6960 Malicious code in lita_onewheel-beer-apex (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Multiple vulnerabilities in multiple Trend Micro products

Overview Trend Micro Incorporated has released security updates for multiple Trend Micro products. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Apex One 2019 On-prem, Apex One as a Service Local privilege escalation due ...

Trend Micro Apex One Denial of Service Vulnerability

Trend Micro Apex One is an endpoint protection software from Trend Micro. A denial of service vulnerability exists in Trend Micro Apex One, which can be exploited by attackers to cause a denial of service...

Trend Micro Apex One Access Control Error Vulnerability (CNVD-2024-40819)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An access control error vulnerability exists in Trend Micro Apex One, which can be exploited by an attacker to elevate privileges and execute arbitrary code in the system context...

Trend Micro Apex One Security Proxy Link Vulnerability

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from a Secure Proxy Link vulnerability that stems from a Secure Proxy Link vulnerability that can be exploited by a local attacker to elevate privileges...

Trend Micro Apex One Information Disclosure Vulnerability (CNVD-2024-40823)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information in the system context...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2024-40826)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on a system...

Vulnerabilities fixed in Trend Micro Apex One

Trend Micro fixed vulnerabilities in Apex One A local malicious party could exploit the vulnerabilities to cause a denial-of-service DoS, or grant themselves elevated privileges and potentially execute arbitrary code on the local system. Trend Micro has released updates to fix the vulnerabilities...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2024-40818)

Trend Micro Apex One is an endpoint protection software from Trend Micro. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by an attacker to elevate privileges and execute arbitrary code in the system context...

CVE-2024-37289

An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2024-37289

An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2024-36307

A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2024-36305

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2024-36306

A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-service condition on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2024-36303

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...