CVE-2021-45440: Improper Privilege Management

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 on-prem versions only could allow a local attacker to abuse an impersonation privilege and elevate to a higher level of privileges. Please note: an attacker must first obtain the...

CVE-2021-45231: Improper Link Resolution Before File Access

A link following privilege escalation vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on th...

CVE-2021-44024: Improper Link Resolution Before File Access

A link following denial-of-service vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability t...

Organized Cybercrime Cases: What CISOs Need to Know

Jon Clay, VP of Threat Intelligence at Trend Micro, explores the latest Trend Micro Research covering Access as a Service AaaS, an emerging business model selling all-access passes to other malicious actors...

PT-2022-2923

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022 Description The issue is related to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This cou...

PT-2022-2924

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022 Description The issue is related to an Out-Of-Bounds Read Information Disclosure that could allow an attacker to disclose sensitive information on an affected machine. It is associated with a...

PT-2022-12316

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions affected versions not specified Trend Micro Worry-Free Business Security version 10.0 SP1 and Services Description A link following privilege escalation issue could allow a local attacker to create a specially...

PT-2022-12355

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-prem and SaaS affected versions not specified Description A local attacker could exploit an origin validation error to drop and manipulate a specially crafted file, allowing them to issue commands over a certain pipe an...

PT-2022-12356

Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security on prem only affected versions not specified Description A denial-of-service vulnerability could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. The attacker must first...

PT-2022-11973

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-prem and SaaS Trend Micro Worry-Free Business Security versions 10.0 SP1 and Services Description A denial-of-service vulnerability could allow a local attacker to overwrite arbitrary files in the context of SYSTEM, but...

Trend Micro Worry-Free Business Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Trend Micro Apex One Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Trend Micro Worry-Free Business Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

Trend Micro Apex One Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fl...

Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

PT-2022-12354

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Worry-Free Business Security version 10.0 SP1 Description A local attacker could exploit an unnecessary privilege issue to elevate privileges by abusing an impersonation privileg...

Omron CX-One

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-One Vulnerabilities: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...

Trend Micro Worry-Free Business Security – Backlink Vulnerability

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security, and email protection. Trend Micro Worry-Free Business Security suffers from a back-link vulnerability,...

Trend Micro Worry-Free Business Security – Backlink Vulnerability

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security, and email protection. Trend Micro Worry-Free Business Security suffers from a back-link vulnerability,...

Trend Micro Apex One Access Control Vulnerability

Trend Micro Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. An access control error vulnerability exists in Trend Micro Apex One, which can be exploited by a local user to elevate privileges...