CVE-2023-32522

CVE-2023-32522 – Trend Micro Mobile Security (Enterprise) 9.8 SP5 path traversal . Affected software: Trend Micro Mobile Security (Enterprise) 9.8 SP5. Issue: a path traversal exists in a specific DLL that could let an authenticated remote attacker delete arbitrary files. Root cause: untrusted pa...

CVE-2023-32522

A path traversal exists in a specific dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

CVE-2023-32522

A path traversal exists in a specific dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

CVE-2023-32521

A path traversal exists in a specific service dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files...

CVE-2023-32521

CVE-2023-32521 – Path traversal in Trend Micro Mobile Security (Enterprise) 9.8 SP5 . A path traversal vulnerability exists in a specific service dll that could allow an unauthenticated remote attacker to delete arbitrary files. Affected product is Trend Micro Mobile Security for Enterprise (vers...

CVE-2023-32521

A path traversal exists in a specific service dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files...

CVE-2023-30902

A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affected installations...

CVE-2023-30902

Consolidated details from connected sources confirm CVE-2023-30902 affects Trend Micro Apex One and Apex One as a Service agent, enabling local privilege escalation that could result in deletion of privileged Trend Micro registry keys (including protected keys). Root cause is an elevation-of-priv...

CVE-2023-28929

Trend Micro Security 2021, 2022, and 2023 Consumer are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started...

CVE-2023-28929

CVE-2023-28929 affects Trend Micro Security (consumer editions) 2021–2023. The issue is a DLL hijacking flaw (CWE-427) where loading a malicious DLL via a vulnerable executable may allow arbitrary code execution or execution of a malicious program each time the executable starts. Affected product...

CVE-2023-28929

Trend Micro Security 2021, 2022, and 2023 Consumer are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started...

PT-2023-5336

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One and Apex One as a Service affected versions not specified Description The issue is related to a path traversal vulnerability. This vulnerability could allow an unauthenticated attacker to upload an arbitrary file to the...

PT-2023-22039 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security versions 2021 through 2023 Description: The issue allows an attacker to use a specific executable file as an execution and/or persistence mechanism, potentially executing a malicious program each time the executable file ...

CVE-2023-32522: Improper Limitation of a Pathname to a Restricted Directory

A path traversal exists in a specific dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

ApexOne Security Agent Privilege Escalation

The vulnerability of the ApexOne Security Agent in antivirus software products Trend Micro Apex One and Apex One as a Service is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

PT-2023-25278 · Trend Micro · Trend Micro Mobile Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Mobile Security Enterprise version 9.8 SP5 Description: A remote attacker could leverage a vulnerability to download a particular log file which may contain sensitive information regarding the product. Recommendations: For Trend...

PT-2023-23034 · Trend Micro · Trend Micro Apex One +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: A privilege escalation issue could allow a local attacker to unintentionally delete privileged Trend Micro...

PT-2023-23853

Name of the Vulnerable Software and Affected Versions Trend Micro Mobile Security Enterprise version 9.8 SP5 Description A path traversal issue exists in a specific dll, allowing an authenticated remote attacker to delete arbitrary files. The attacker must first obtain the ability to execute...

CVE-2023-35695: Insertion of Sensitive Information into Log File

A remote attacker could leverage a vulnerability in Trend Micro Mobile Security Enterprise 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product...

CVE-2023-34147: Improper Privilege Management

An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first...