CVE-2023-52326

CVE-2023-52326 affects Trend Micro Apex Central (on-premise) dashboard widgets and is described as a cross-site scripting (XSS) vulnerability that may allow an attacker to achieve remote code execution on affected servers. Connected sources confirm the issue relates to on-premise components in th...

CVE-2023-52325

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...

CVE-2023-52325

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...

CVE-2023-52325

Trend Micro Apex Central is affected by a widget local file inclusion vulnerability that can lead to remote code execution . The underlying issue is inadequate validation of user-supplied data before it is used in a PHP include, specifically in the getObjWGFServiceApiByApiName function. Exploitat...

CVE-2023-52324

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any...

CVE-2023-52324

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any...

CVE-2023-52324

CVE-2023-52324 affects Trend Micro Apex Central and describes an unrestricted file upload vulnerability that enables a remote attacker to create arbitrary files on affected installations. The core issue involves improper validation during file uploads (notably ZIP handling per ZDI advisory), allo...

CVE-2023-52094

An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute...

CVE-2023-52094

An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute...

CVE-2023-52094

Trend Micro Apex One Security Agent updater vulnerability (CVE-2023-52094) allows a local attacker who can run code with low privileges to abuse the updater mechanism and delete an arbitrary folder, enabling local privilege escalation. Exploitation relies on manipulating the updater/link-followin...

CVE-2023-52093

An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-52093

CVE-2023-52093 is a local privilege escalation in Trend Micro Apex One. The exposed dangerous function exists in the Apex One agent, specifically tied to the NT Listener service, allowing a local attacker who can run low-privileged code to gain SYSTEM-level privileges. Multiple sources (ZDI advis...

CVE-2023-52093

An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-52092

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-52092

Trend Micro Apex One contains a local privilege escalation flaw in the Damage Cleanup Engine. Exploitation described by ZDI involves creating a junction to abuse a driver and delete a file, enabling code execution with SYSTEM privileges after an attacker gains low-privileged code execution on the...

CVE-2023-52091

CVE-2023-52091 affects Trend Micro Apex One, specifically the Anti-Spyware Engine within the RealTime Scan service. The vulnerability arises from a junction-based flaw in the engine that an attacker with the ability to run low-privileged code can exploit to escalate privileges to SYSTEM on the ta...

CVE-2023-52091

An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-52090

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-52090

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-52090

CVE-2023-52090 represents a local privilege escalation in Trend Micro Apex One, affecting the Virus Scan Engine. The vulnerability enables a low-privileged local attacker to escalate to SYSTEM by abusing a link-following flaw via mounting and exploiting the VSApiNt driver to delete a file. Public...