CVE-2021-45231

A link following privilege escalation vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on th...

CVE-2021-45231

CVE-2021-45231 is a local privilege escalation affecting Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services). The issue arises in the Real-time Scan Service: an attacker who can run low-privilege code can abuse a symbolic link to overwrite ...

CVE-2021-44024

A link following denial-of-service vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability t...

CVE-2021-44024

CVE-2021-44024 affects Trend Micro Apex One (on‑prem and SaaS) and Trend Micro Worry‑Free Business Security (10.0 SP1/Services). The issue is a denial‑of‑service flaw exploitable via symbolic link abuse in the Real‑time Scan Service, allowing a local attacker who already has low‑privilege code ex...

CVE-2021-44024: Improper Link Resolution Before File Access

A link following denial-of-service vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability t...

CVE-2021-45441: Origin Validation Error

A origin validation error vulnerability in Trend Micro Apex One on-prem and SaaS could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to...

CVE-2021-45440: Improper Privilege Management

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 on-prem versions only could allow a local attacker to abuse an impersonation privilege and elevate to a higher level of privileges. Please note: an attacker must first obtain the...

CVE-2021-45231: Improper Link Resolution Before File Access

A link following privilege escalation vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on th...

CVE-2021-45442: Improper Link Resolution Before File Access

A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security on prem only could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-2021-44024. Please note: an attacker must first obtain the...

Organized Cybercrime Cases: What CISOs Need to Know

Jon Clay, VP of Threat Intelligence at Trend Micro, explores the latest Trend Micro Research covering Access as a Service AaaS, an emerging business model selling all-access passes to other malicious actors...

PT-2022-2924

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022 Description The issue is related to an Out-Of-Bounds Read Information Disclosure that could allow an attacker to disclose sensitive information on an affected machine. It is associated with a...

PT-2022-2923

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022 Description The issue is related to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This cou...

PT-2022-11973

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-prem and SaaS Trend Micro Worry-Free Business Security versions 10.0 SP1 and Services Description A denial-of-service vulnerability could allow a local attacker to overwrite arbitrary files in the context of SYSTEM, but...

PT-2022-12355

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One on-prem and SaaS affected versions not specified Description A local attacker could exploit an origin validation error to drop and manipulate a specially crafted file, allowing them to issue commands over a certain pipe an...

PT-2022-12316

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions affected versions not specified Trend Micro Worry-Free Business Security version 10.0 SP1 and Services Description A link following privilege escalation issue could allow a local attacker to create a specially...

PT-2022-12356

Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security on prem only affected versions not specified Description A denial-of-service vulnerability could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. The attacker must first...

PT-2022-12354

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro Worry-Free Business Security version 10.0 SP1 Description A local attacker could exploit an unnecessary privilege issue to elevate privileges by abusing an impersonation privileg...

Trend Micro Apex One Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fl...

Trend Micro Worry-Free Business Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

Trend Micro Apex One Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...