CVE-2021-25253

An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to...

CVE-2021-25253

CVE-2021-25253 affects Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1. The issue is caused by improper access control on a resource used by the Apex One service, enabling a local attacker who can run low-privilege code to escalate privileges (often to SYSTEM) on affected insta...

CVE-2021-25250

An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute...

CVE-2021-25250

The CVE-2021-25250 issue affects Trend Micro Apex One, Apex One as a Service, and OfficeScan XG SP1, with the vulnerable component identified as the ApexOne Security Agent. The root cause is an improper access control that sets incorrect permissions on a sensitive file, enabling a local attacker ...

Trend Micro Password Manager code-related vulnerabilities

Trend Micro Password Manager is a secure password management solution from Trend Micro. A security vulnerability exists in Trend Micro Password Manager version 5, which stems from the program's susceptibility to a DLL hijacking vulnerability that could allow an attacker to inject a malicious DLL...

CVE-2021-22505: Undefined Security Weakness

Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent...

CVE-2021-28646: Incorrect Permission Assignment for Critical Resource

An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file on affected installations...

CVE-2021-28645: Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2021-25253: Incorrect Permission Assignment for Critical Resource

An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to...

PT-2021-3229

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Description The issue is related to insecure file permissions,...

PT-2021-15111

Name of the Vulnerable Software and Affected Versions Micro Focus Operations Agent versions 12.0x through 12.15 Description The issue allows for escalation of privileges in the Micro Focus Operations Agent. This could be exploited to escalate privileges and execute code under the account of the...

PT-2021-17883

Name of the Vulnerable Software and Affected Versions: Trend Micro Password Manager version 5 Consumer Description: The issue allows an attacker to inject a malicious DLL file during the installation process, potentially executing a malicious program each time a user installs a program. This is d...

CVE-2021-28647: Uncontrolled Search Path Element

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

CVE-2021-25250: Incorrect Permission Assignment for Critical Resource

An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute...

Micro-Segmentation Security for the Hybrid Cloud with NVIDIA BlueField DPUs

Looking for software-defined yet hardware-accelerated data center infrastructure? And how NVIDIA Bluefield & Guardicore Centra can help...

Trend Micro Worry-Free Business Security Remote File Deletion (000281948)

Binary data trendmicrowfbscve-2020-28574.nbin...

Trend Micro Apex One Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

PT-2021-3228

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions affected versions not specified Trend Micro Apex One as a Service versions affected versions not specified Trend Micro OfficeScan XG SP1 versions affected versions not specified Description The issue is related to...

Trend Micro Apex One Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

Trend Micro Apex One Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...