PT-2022-18998

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager Consumer versions 3.7.0.1223 and below Description The issue is related to the DLL search path in the installer, which may lead to insecurely loading Dynamic Link Libraries. This was reported on an end-of-life...

CVE-2022-30701: Uncontrolled Search Path Element

An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to craft a special configuration file to load an untrusted library with escalated privileges on affected installations. Please note: an attacker must first obtain the...

CVE-2022-30700: Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2022-28394: Uncontrolled Search Path Element

EOL Product CVE - Installer of Trend Micro Password Manager Consumer versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Please note that this was reported on an EOL...

PT-2022-20230

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security version 2022 Description The issue allows a low privileged local user to manipulate the product's secure erase feature to delete arbitrary files due to a link following vulnerability. Recommendations For Trend Micr...

Keysight N6854A Geolocation server and N6841A RF Sensor software

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Keysight Technologies, Inc. Equipment: N6854A Geolocation server and N6841A RF Sensor software Vulnerabilities: Relative Path Traversal, Deserialization of Untrusted Data 2. RISK EVALUATION Successful...

New Linux-Based Ransomware 'Cheerscrypt' Targets EXSi Devices

Trend Micro Research detected “Cheerscrypt”, a new Linux-based ransomware variant that compromises EXSi servers. We discuss our initial findings on in this report...

New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices

Trend Micro Research detected “Cheerscrypt”, a new Linux-based ransomware variant that compromises ESXi servers. We discuss our initial findings on in this report...

GHSA-QGJ4-RC8M-44MQ Stored XSS vulnerability in Jenkins job build time trend

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability. Jenkins 2.245, LTS 2.235.2 escapes the agent name...

Stored XSS vulnerability in Jenkins job build time trend

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability. Jenkins 2.245, LTS 2.235.2 escapes the agent name...

Trend Micro Security security vulnerabilities

Trend Micro Security Consumer is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security Consumer versions 17 through 17.7.1383 that originates from exposing a dangerous method in the application. A local attacker could exploit the vulnerability to gain...

Trend Micro Security Buffer Error Vulnerability

Trend Micro Security Consumer is an antivirus software from Trend Micro. A buffer error vulnerability exists in Trend Micro Security Consumer versions 17 through 17.7.1130 that originates from a boundary condition. A local attacker could exploit the vulnerability to access potentially sensitive...

Uncovering a Kingminer Botnet Attack Using Trend Micro™ Managed XDR

Trend Micro’s Managed XDR team addressed a Kingminer botnet attack conducted through an SQL exploit. We discuss our findings and analysis in this report...

Trend Micro's One Vision, One Platform

Why Trend Micro is evolving its approach to enterprise protection...

Trend Micro Antivirus libTmUtil Privilege Escalation

The vulnerability of the libTmUtil dylib component of the Trend Micro Antivirus security tool is related to errors in link handling. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

CVE-2022-30523

Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the...

CVE-2022-30523

Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the...

CVE-2022-30523

Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the...

Privilege escalation

Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the...

CVE-2022-30523

The CVE-2022-30523 case concerns Trend Micro Password Manager (Consumer) versions 5.0.0.1266 and earlier, impacted by a Link Following Privilege Escalation vulnerability. Technical details in connected documents show that a local low-privilege attacker could exploit a symbolic link via the Trend ...