CVE-2020-25770

The CVE-2020-25770 entry concerns an out-of-bounds read information disclosure in Trend Micro Apex One. It can allow a local attacker to disclose sensitive information after obtaining the ability to execute low-privileged code on the target system. The description specifies the vulnerability affe...

CVE-2020-25771

Trend Micro Apex One contains local, out-of-bounds read information-disclosure vulnerabilities tracked as CVE-2020-25771. Exploitation requires attacker to first obtain the ability to execute low-privileged code on the target and then trigger the vulnerability to disclose sensitive information to...

CVE-2020-24563

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option if configured, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged co...

CVE-2020-24563

CVE-2020-24563 affects Trend Micro Apex One; a local attacker who can run low-privileged code can exploit the ApexOne Security Agent unload process to gain privilege escalation and execute code. The linked ZDI advisory attributes the flaw to an authentication bypass in the ApexOne Security Agent,...

CVE-2020-24564

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2020-24564

CVE-2020-24564 is an out-of-bounds read information disclosure affecting Trend Micro Apex One. The connected Red Hat CVEs and NVD entry describe a local, low-privilege path to read memory and reveal sensitive information on vulnerable installations. The vulnerability requires the attacker to exec...

CVE-2020-24565

Trend Micro Apex One is affected by CVE-2020-24565, an out-of-bounds read information disclosure vulnerability. The issue allows a local attacker who already has low-privileged code execution to disclose sensitive information on vulnerable installations. The Red Hat CVE entries (CVE-2020-24564, C...

CVE-2020-24565

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2020-24562

Trend Micro OfficeScan XG SP1 on Windows is affected by a local privilege-escalation vulnerability (CVE-2020-24562) that lets an attacker who can execute low-privileged code create a hard link to an arbitrary file, enabling privilege escalation and potential code execution. Public sources in conn...

CVE-2020-24562

A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code ...

ServerProtect for Linux vulnerable to OS command injection

Overview ServerProtect for Linux provided by Trend Micro Incorporated contains an OS command injection vulnerability CWE-78. Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact A remote authenticated attacker may execute arbitrary code. Soluti...

Trend Micro Maximum Security Race Condition Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Trend Micro Apex One Buffer Overflow Vulnerability (CNVD-2020-58085)

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A buffer overflow vulnerability exists in Trend Micro Apex One. The vulnerability originates when a network system or product performs an...

Trend Micro Apex One Buffer Overflow Vulnerability (CNVD-2020-58225)

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A buffer overflow vulnerability exists in Trend Micro Apex One. The vulnerability originates when a network system or product performs an...

Trend Micro Apex One Information Disclosure Vulnerability (CNVD-2020-58784)

Trend Micro Apex One is an endpoint protection solution that offers the broadest range of protection capabilities, including high-accuracy machine learning and advanced ransomware protection. An information disclosure vulnerability exists in the parsing of ZIP files in the ServerMigrationTool...

Trend Micro OfficeScan XG SP1 Elevation of Privilege Vulnerability

Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. A security vulnerability in Trend Micro OfficeScan XG SP1 for Microsoft Windows platforms can be exploited to create a hard link to any file on a system, which can then be manipulated for privilege elevation...

Trend Micro Apex One Buffer Overflow Vulnerability (CNVD-2020-58223)

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A buffer overflow vulnerability exists in Trend Micro Apex One. The vulnerability originates when a network system or product performs an...

Trend Micro Apex One Authentication Bypass Vulnerability

Trend Micro Apex One is an endpoint protection solution that offers the broadest range of protection capabilities, including high-accuracy machine learning and advanced ransomware protection. An authentication bypass vulnerability exists in Trend Micro Apex One. An attacker could use this...

Trend Micro Apex One Buffer Overflow Vulnerability

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A buffer overflow vulnerability exists in Trend Micro Apex One. The vulnerability originates when a network system or product performs an...

Trend Micro Apex One Remote Code Execution Vulnerability

Trend Micro Apex One is an endpoint protection solution that offers the broadest range of protection capabilities, including high-accuracy machine learning and advanced ransomware protection. A remote code execution vulnerability exists in DAT file parsing in the ServerMigrationTool component of...