CVE-2021-42104

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili...

CVE-2021-42105

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili...

CVE-2021-42108

CVE-2021-42108 affects Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 via the Web Console. The root cause is an untrusted process impersonating the client of a pipe, enabling a local attacker with low-privilege code execution to escalate to SYSTEM-level priv...

CVE-2021-42108

Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute...

CVE-2021-42107

CVE-2021-42107 describes a local privilege escalation in Trend Micro products: Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business Security Services. The issue is an “unnecessary privilege” vulnerability that would allow a local attacker to escalate pri...

CVE-2021-42106

CVE-2021-42106 affects Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business Security Services. The issue is described as an unnecessary privilege vulnerability that could allow a local attacker to escalate privileges on affected installations...

CVE-2021-42105

CVE-2021-42105 describes a local privilege escalation in Trend Micro products (Apex One, Apex One as a Service, Worry‑Free Business Security 10.0 SP1 and Worry‑Free Business Security Services). The vulnerability allows a local attacker who already can execute low‑privileged code to escalate privi...

CVE-2021-42104

Technical details about CVE-2021-42104 are not publicly provided in the supplied connected documents. No product/version/impact specifics are confirmed here. Monitor for updates.

CVE-2021-23139

The CVE-2021-23139 issue affects Trend Micro Apex One and Worry-Free Business Security 10.0 SP1. A null pointer dereference in the CGI interface can allow a remote attacker to crash the CGI process, resulting in a denial of service. Descriptions and connected documents confirm the vulnerability i...

CVE-2021-23139

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations...

PT-2021-15390

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One version 10.0 SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description A null pointer issue could allow an attacker to crash the CGI program on affected installations. Recommendations For Trend Micro Apex O...

CVE-2021-42108: Improper Privilege Management

Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute...

CVE-2021-42105: Improper Privilege Management

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili...

CVE-2021-42104: Improper Privilege Management

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili...

CVE-2021-42106: Improper Privilege Management

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili...

CVE-2021-42012: Out-of-bounds Write

A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code...

CVE-2021-23139: NULL Pointer Dereference

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations...

CVE-2021-42107: Improper Privilege Management

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili...

PT-2021-23530

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro Worry-Free Business Security 10.0 SP1 affected versions not specified Trend Micro Worry-Free Business Security...

PT-2021-23533

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro Worry-Free Business Security version 10.0 SP1 Trend Micro Worry-Free Business Security Services affected version...