CVE-2022-26319

The CVE-2022-26319 entry concerns Trend Micro Portable Security (versions 3.0 Pro, 3.0, and 2.0) and describes an installer search patch element vulnerability that could allow a local attacker to place an arbitrarily generated DLL in an installer folder to achieve local privilege escalation. The ...

CVE-2021-26341

Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage...

CVE-2021-26401

LFENCE/JMP mitigation V2-2 may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs...

PT-2022-17786

Name of the Vulnerable Software and Affected Versions Trend Micro Portable Security versions 2.0 through 3.0 Pro Description An installer search patch element vulnerability could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to elevate local privileges...

Trend Micro Portable Security 代码问题漏洞

Trend Micro Portable Security is a malware scanning and cleaning tool from Trend Micro, Inc. Trend Micro Portable Security has an elevation of privilege vulnerability that can be exploited by attackers to cause local elevation of privilege...

PT-2022-17795

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager Consumer versions 5.0.0.1262 and below Description The issue is related to an Uncontrolled Search Path Element vulnerability. This could allow an attacker to use a specially crafted file to exploit the vulnerabilit...

CVE-2022-26337: Uncontrolled Search Path Element

Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...

CVE-2022-26319: Uncontrolled Search Path Element

An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to elevate local privileges. Please note: an attacker must first obtain the ability to execute...

AMD CPUs 安全漏洞

AMD CPUs is a GPU component from AMD Corporation. A security vulnerability exists in AMD CPUs that stems from an attacker being able to bypass access restrictions to AMD processor data via the branch predictor selector lfence/jmp to read sensitive information...

AMD CPUs 安全漏洞

AMD CPUs is a GPU component from AMD Corporation. AMD CPUs suffers from a security vulnerability that stems from the fact that an attacker can bypass access restrictions to AMD processor data to read sensitive information via Beyond Branch Predictor Selectors...

AMD Processors 信息泄露漏洞

AMD Processors is a processor from the American company AMD. AMD Processors suffers from an information disclosure vulnerability that stems from deficiencies in the hardware mitigations that AMD has added to their products. An attacker could exploit this vulnerability to obtain sensitive...

Trend Micro ServerProtect Static Credential (CVE-2022-25329)

Binary data trendmicroserverprotectcve-2022-25329.nbin...

SUSE: Security Advisory (SUSE-SU-2022:0736-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-4842 · Trend Micro · Trend Micro Apex One +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: A link following local privilege escalation issue could allow a local attacker to abuse an insecure directory,...

Multiples security updates for Trend Micro Endpoint security products for enterprises (March 2022)

Overview Trend Micro Incorporated has released multiple security updates for Trend Micro Endpoint security products for enterprises. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Apex One On Premise 2019 Privilege...

MvpnExcludeDomains fails to take effect on iOS when using Citrix WebSSO micro VPN with Microsoft Endpoint Manager MAM (Intune)

Microsoft Edge or Citrix Secure Mail for iOS is configured with 'MvpnExcludeDomains'. When a user browses to a website that is listed under'MvpnExcludeDomains', the traffic is still sent through Citrix Gateway. This traffic is instead expected to be sent directly to the website not through Citrix...

5 Cloud Native Security Platform Must-haves

Discover 5 key security components to review and how to leverage a cloud native security platform with Mick McCluney Trend Micro and Kelly Griffin AWS...

PT-2022-2953 · Amd +8 · Amd Cpus +8

Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue is related to the LFENCE/JMP module in AMD CPUs, specifically concerning the branch prediction mechanism. This allows an attacker to access protected memory from a program withou...

The vulnerability of the `program_after_update` function in the Trend Micro Antivirus protection tool allows attackers to enhance their privileges.

The vulnerability of the programafterupdate function in the Trend Micro Antivirus protection tool is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-25330

Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution...