CVE-2021-45440

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 on-prem versions only could allow a local attacker to abuse an impersonation privilege and elevate to a higher level of privileges. Please note: an attacker must first obtain the...

CVE-2021-45231

A link following privilege escalation vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on th...

CVE-2021-45231

CVE-2021-45231 is a local privilege escalation affecting Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services). The issue arises in the Real-time Scan Service: an attacker who can run low-privilege code can abuse a symbolic link to overwrite ...

CVE-2021-44024

CVE-2021-44024 affects Trend Micro Apex One (on‑prem and SaaS) and Trend Micro Worry‑Free Business Security (10.0 SP1/Services). The issue is a denial‑of‑service flaw exploitable via symbolic link abuse in the Real‑time Scan Service, allowing a local attacker who already has low‑privilege code ex...

CVE-2021-44024

A link following denial-of-service vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability t...

CVE-2021-44024: Improper Link Resolution Before File Access

A link following denial-of-service vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability t...

CVE-2021-45442: Improper Link Resolution Before File Access

A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security on prem only could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-2021-44024. Please note: an attacker must first obtain the...

CVE-2021-45440: Improper Privilege Management

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 on-prem versions only could allow a local attacker to abuse an impersonation privilege and elevate to a higher level of privileges. Please note: an attacker must first obtain the...

CVE-2021-45231: Improper Link Resolution Before File Access

A link following privilege escalation vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on th...

CVE-2021-45441: Origin Validation Error

A origin validation error vulnerability in Trend Micro Apex One on-prem and SaaS could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to...

Organized Cybercrime Cases: What CISOs Need to Know

Jon Clay, VP of Threat Intelligence at Trend Micro, explores the latest Trend Micro Research covering Access as a Service AaaS, an emerging business model selling all-access passes to other malicious actors...

PT-2022-2924

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022 Description The issue is related to an Out-Of-Bounds Read Information Disclosure that could allow an attacker to disclose sensitive information on an affected machine. It is associated with a...

PT-2022-2923

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022 Description The issue is related to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This cou...

Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Trend Micro Apex One Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Trend Micro Apex One Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fl...

Trend Micro Worry-Free Business Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

Trend Micro Worry-Free Business Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

PT-2022-12316

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions affected versions not specified Trend Micro Worry-Free Business Security version 10.0 SP1 and Services Description A link following privilege escalation issue could allow a local attacker to create a specially...

PT-2022-12355

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-prem and SaaS affected versions not specified Description A local attacker could exploit an origin validation error to drop and manipulate a specially crafted file, allowing them to issue commands over a certain pipe an...