CVE-2022-44653

A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order t...

CVE-2022-44653

The CVE-2022-44653 entry describes a directory-traversal vulnerability in Trend Micro Apex One and Apex One as a Service, stemming from the Security Agent. A local attacker who can execute code with low privileges could escalate privileges on affected installations. The issue affects Trend Micro ...

CVE-2022-44652

An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system ...

CVE-2022-44652

CVE-2022-44652 affects Trend Micro Apex One and Apex One as a Service. The vulnerability is an improper handling of exceptional conditions that could enable a local attacker to escalate privileges after gaining the ability to execute low-privileged code; exploitation is local with no user interac...

CVE-2022-44652

An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system ...

CVE-2022-44651

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2022-44651

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2022-44651

CVE-2022-44651 affects Trend Micro Apex One and Apex One as a Service agent. It is a Time-of-Check Time-of-Use (TOCTOU) race condition that could allow a local attacker who can run low-privilege code to escalate privileges on vulnerable installations. The CVSS v3.1 metrics indicate a Local attack...

CVE-2022-44650

CVE-2022-44650 involves a memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service, enabling a local attacker who can execute low-privileged code to elevate privileges. Affected products are Trend Micro Apex One and Apex One a...

CVE-2022-44650

A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on...

CVE-2022-44650

A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on...

CVE-2022-44649

Trend Micro Apex One and Apex One as a Service are affected by CVE-2022-44649 due to an out-of-bounds access in the Unauthorized Change Prevention service. The vulnerability can allow a local attacker who already has low-privilege code execution to elevate privileges on affected installations. Im...

CVE-2022-44649

An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code...

CVE-2022-44649

An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code...

CVE-2022-44648

An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2022-44648

CVE-2022-44648 is an out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service . It could allow a local attacker to disclose sensitive information on affected installations, with the attacker required to execute low-privilege code. The connected documents corroborate the ...

CVE-2022-44648

An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2022-44647

An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2022-44647

An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2022-44647

CVE-2022-44647 describes an Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service. The issue could allow a local attacker to disclose sensitive information on affected installations. Exploitation requires the attacker to execute low-privileged code locally (– attack v...