CVE-2021-42106

CVE-2021-42106 affects Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business Security Services. The issue is described as an unnecessary privilege vulnerability that could allow a local attacker to escalate privileges on affected installations...

CVE-2021-42105

CVE-2021-42105 describes a local privilege escalation in Trend Micro products (Apex One, Apex One as a Service, Worry‑Free Business Security 10.0 SP1 and Worry‑Free Business Security Services). The vulnerability allows a local attacker who already can execute low‑privileged code to escalate privi...

CVE-2021-42104

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili...

CVE-2021-42104

Technical details about CVE-2021-42104 are not publicly provided in the supplied connected documents. No product/version/impact specifics are confirmed here. Monitor for updates.

CVE-2021-42103

CVE-2021-42103 describes an Uncontrolled Search Path Element vulnerability in Trend Micro Apex One and Apex One as a Service that could allow a local attacker to escalate privileges after gaining the ability to execute low-privileged code. The issue stems from improper handling of search paths, e...

CVE-2021-42103

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th...

CVE-2021-42102

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2021-42102

CVE-2021-42102 affects Trend Micro Apex One and Apex One as a Service; it is an Uncontrolled Search Path Element vulnerability that enables local privilege escalation. The root cause involves how the vulnerable agents load configuration paths (notably OpenSSL-related configuration) from unsecured...

CVE-2021-42101

CVE-2021-42101 affects Trend Micro Apex One and Apex One as a Service. It is an uncontrolled search path element vulnerability that could allow a local attacker to escalate privileges after obtaining low-privilege code execution. The entry notes similarity to CVE-2021-42103; no remote/vector expl...

CVE-2021-42101

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th...

CVE-2021-42011

An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2021-42011

CVE-2021-42011 refers to an incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service. The issue allows a local attacker who already has low-privilege code execution to load a DLL with escalated privileges, compromising affected installations. Supported detai...

CVE-2021-42012

CVE-2021-42012 affects Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security 10.0 SP1. The vulnerability is a stack-based buffer overflow in the Trend Micro Security Server Database Service that allows a local attacker to escalate to SYSTEM privileges. Successful exploitat...

CVE-2021-23139

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations...

CVE-2021-23139

The CVE-2021-23139 issue affects Trend Micro Apex One and Worry-Free Business Security 10.0 SP1. A null pointer dereference in the CGI interface can allow a remote attacker to crash the CGI process, resulting in a denial of service. Descriptions and connected documents confirm the vulnerability i...

Trend Micro Apex One Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Web Console...

Trend Micro Apex One Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

Trend Micro Apex One Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Security...

Trend Micro Apex One Uncontrolled Search Path Element Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configurati...

Trend Micro Apex One Uncontrolled Search Path Element Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...