CVE-2023-52324

CVE-2023-52324 affects Trend Micro Apex Central and describes an unrestricted file upload vulnerability that enables a remote attacker to create arbitrary files on affected installations. The core issue involves improper validation during file uploads (notably ZIP handling per ZDI advisory), allo...

CVE-2023-52094

An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute...

CVE-2023-52094

Trend Micro Apex One Security Agent updater vulnerability (CVE-2023-52094) allows a local attacker who can run code with low privileges to abuse the updater mechanism and delete an arbitrary folder, enabling local privilege escalation. Exploitation relies on manipulating the updater/link-followin...

CVE-2023-52094

An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute...

CVE-2023-52093

An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-52093

CVE-2023-52093 is a local privilege escalation in Trend Micro Apex One. The exposed dangerous function exists in the Apex One agent, specifically tied to the NT Listener service, allowing a local attacker who can run low-privileged code to gain SYSTEM-level privileges. Multiple sources (ZDI advis...

CVE-2023-52093

An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-52092

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-52092

Trend Micro Apex One contains a local privilege escalation flaw in the Damage Cleanup Engine. Exploitation described by ZDI involves creating a junction to abuse a driver and delete a file, enabling code execution with SYSTEM privileges after an attacker gains low-privileged code execution on the...

CVE-2023-52091

An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-52091

CVE-2023-52091 affects Trend Micro Apex One, specifically the Anti-Spyware Engine within the RealTime Scan service. The vulnerability arises from a junction-based flaw in the engine that an attacker with the ability to run low-privileged code can exploit to escalate privileges to SYSTEM on the ta...

CVE-2023-52090

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-52090

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-52090

CVE-2023-52090 represents a local privilege escalation in Trend Micro Apex One, affecting the Virus Scan Engine. The vulnerability enables a low-privileged local attacker to escalate to SYSTEM by abusing a link-following flaw via mounting and exploiting the VSApiNt driver to delete a file. Public...

CVE-2023-47202

A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-47202

Trend Micro Apex One is affected by CVE-2023-47202: a local file inclusion flaw in the management server could let an authenticated, low-privilege attacker escalate privileges. The issue appears in Apex One’s web console handling of file paths, per ZDI details, enabling code execution in the cont...

CVE-2023-47202

A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-47201

A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

CVE-2023-47201

CVE-2023-47201 is described as a local privilege escalation in the Trend Micro Apex One security agent, caused by a plug-in manager origin validation issue. The vulnerability allows a local attacker to escalate privileges on affected installations, with the prerequisite that the attacker can exec...

CVE-2023-47201

A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...