CVE-2026-34926

CVE-2026-34926 concerns the on‑premise Apex One server, where a directory traversal flaw could let a pre‑authenticated local attacker with admin access modify a server key table to inject code that is deployed to agents. The vulnerability is limited to the on‑premise deployment; no public exploit...

CVE-2024-58104

The CVEs CVE-2024-58104 and CVE-2024-58105 describe a local privilege bypass in Trend Micro Apex One Security Agent Plug-in User Interface Manager that could allow an attacker with low-privilege code execution to bypass security and run arbitrary code on affected installations. Exploitation is de...

CVE-2023-32556

Trend Micro Apex One and Apex One as a Service agent are affected by CVE-2023-32556, a link-following vulnerability that could allow a local attacker to disclose sensitive information. The issue requires the attacker to obtain the ability to execute low-privileged code on the target system. The N...

CVE-2023-34146

Trend Micro Apex One and Apex One as a Service security agent are affected by CVE-2023-34146, described as an exposed dangerous function vulnerability that could allow a local attacker to escalate privileges and write an arbitrary value to specific agent subkeys. The vulnerability requires the at...

CVE-2023-34147

The CVE-2023-34147 entry concerns Trend Micro Apex One and Apex One as a Service security agent. A vulnerability described as an exposed dangerous function could allow a local attacker, who must first obtain the ability to execute low-privileged code, to escalate privileges and write an arbitrary...

CVE-2019-18189

CVE-2019-18189 is a directory-traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) that can bypass authentication and allow an attacker to log on to the product management console as root without authentication. Affected products and ...

CVE-2024-36302

Affected product/tech : Trend Micro Apex One security agent. Vulnerability type and root cause : Local privilege escalation via an origin validation error in the Apex One security agent (CVE-2024-36302). The vulnerability exploits an origin validation weakness to elevate privileges on the host. I...

CVE-2023-32553

Technical details about CVE-2023-32553 are not publicly provided in the connected documents. The initial description notes an access-control issue in Trend Micro Apex One/Apex One as a Service, but no specifics on affected versions, root cause, or remediation are included. Monitor for updates.

CVE-2023-34148

Overview. The CVE concerns Trend Micro Apex One and Apex One as a Service security agent, described as an exposed dangerous function vulnerability that could enable a local attacker to escalate privileges and write an arbitrary value to specific agent subkeys. The threat requires the attacker to ...

CVE-2024-36304

Trend Micro Apex One and Apex One as a Service agent are affected by CVE-2024-36304, a local privilege escalation due to a Time-of-Check Time-Of-Use (TOCTOU) vulnerability. Exploitation requires the attacker to first execute code with low privileges on the target system; no user interaction is ne...

CVE-2024-37289

Trend Micro Apex One contains an improper access control vulnerability (CVE-2024-37289) that could allow a local attacker to escalate privileges. The attacker must first obtain the ability to execute low-privileged code on the target system; impact is reported as high (C, I, A). Several connected...

CVE-2023-47192

CVE-2023-47192 corresponds to a local privilege-escalation issue in Trend Micro Apex One security agent. The vulnerability arises from an agent-link flaw that could let a local attacker escalate privileges after gaining the ability to execute low-privileged code. Public documentation confirms the...

CVE-2024-52048

The connected Red Hat and NVD entries confirm CVE-2024-52048 affects Trend Micro Apex One via a LogServer link vulnerability that allows local privilege escalation. An attacker must first execute low-privileged code on the target system; no public exploit details or affected version/patch informa...

CVE-2022-30700

CVE-2022-30700 concerns Trend Micro Apex One and Apex One as a Service. The vulnerability is an incorrect permission assignment that lets a local attacker load a DLL with escalated privileges, requiring initial low-privilege code execution. The issue affects Apex One products and can lead to priv...

CVE-2024-55917

CVE-2024-55917 is a local privilege escalation in Trend Micro Apex One caused by an origin validation error. The issue allows a local attacker who can run low-privilege code to escalate to SYSTEM, with the attack surface tied to the Apex One components and services referenced in the linked adviso...

CVE-2023-25147

CVE-2023-25147 affects Trend Micro Apex One agent. Affected component: Apex One agent during a specific update process, where a attacker with prior admin rights can bypass protection by using a crafted DLL. Impact aligns with confusion from multiple sources: local privilege escalation and protect...

CVE-2023-25148

CVE-2023-25148 affects Trend Micro Apex One (on-premise) and related agent components. The vulnerability is a link-following issue in the Apex One agent that allows a local attacker to escalate privileges by changing a specific file into a pseudo-symlink, given the attacker already has low-privil...

CVE-2022-30701

CVE-2022-30701 is an Uncontrolled Search Path Element vulnerability in Trend Micro Apex One and Apex One as a Service. The issue allows a local attacker who can run low-privilege code to craft a configuration file that causes the product to load an untrusted DLL with escalated privileges. The Red...

CVE-2022-44654

CVE-2022-44654 (Trend Micro Apex One / Apex One as a Service) : The issue concerns a monitor engine component that was compiled without the /SAFESEH memory protection mechanism. This root cause potentially affects the monitor engine in Trend Micro Apex One and Apex One as a Service, with the docu...

CVE-2022-44648

CVE-2022-44648 is an out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service . It could allow a local attacker to disclose sensitive information on affected installations, with the attacker required to execute low-privilege code. The connected documents corroborate the ...

CVE-2023-25145

CVE-2023-25145 describes a local privilege-escalation vulnerability in the Trend Micro Apex One agent, due to a link-following flaw in the scanning function. A local attacker with the ability to run low-privilege code can exploit this to escalate privileges on affected installations. The descript...

CVE-2023-34144

CVE-2023-34144 affects Trend Micro Apex One and Apex One as a Service security agent. The vulnerability is an untrusted search path issue that could allow a local attacker to escalate privileges on eligible installations. An attacker must first obtain the ability to execute low-privileged code on...

CVE-2022-44651

CVE-2022-44651 affects Trend Micro Apex One and Apex One as a Service agent. It is a Time-of-Check Time-of-Use (TOCTOU) race condition that could allow a local attacker who can run low-privilege code to escalate privileges on vulnerable installations. The CVSS v3.1 metrics indicate a Local attack...

CVE-2023-47198

The CVE-2023-47198 entry describes an origin validation vulnerability in the Trend Micro Apex One security agent that could let a local attacker escalate privileges on affected installations. An attacker must first achieve the ability to execute low-privileged code on the target. The connected do...

CVE-2022-44647

CVE-2022-44647 describes an Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service. The issue could allow a local attacker to disclose sensitive information on affected installations. Exploitation requires the attacker to execute low-privileged code locally (– attack v...

CVE-2023-47197

CVE-2023-47197 concerns Trend Micro Apex One; it describes an origin validation vulnerability in the Apex One security agent that could let a local attacker escalate privileges on affected installations. The vulnerability requires the attacker to first gain the ability to execute low-privilege co...

CVE-2024-52050

CVE-2024-52050 affects Trend Micro Apex One. The LogServer component is vulnerable to an arbitrary file creation issue enabling local privilege escalation when an attacker can execute low-privileged code. Documented impact is local, with high confidentiality/integrity/availability affected. Remed...

CVE-2023-25143

Trend Micro Apex One is affected by CVE-2023-25143: an uncontrolled search path element in the Apex One Server installer could allow a remote attacker to achieve remote code execution. The issue is tied to the server installer, with impact on affected Trend Micro Apex One deployments. Public deta...

CVE-2022-44652

CVE-2022-44652 affects Trend Micro Apex One and Apex One as a Service. The vulnerability is an improper handling of exceptional conditions that could enable a local attacker to escalate privileges after gaining the ability to execute low-privileged code; exploitation is local with no user interac...

CVE-2023-32554

Technical details for CVE-2023-32554 are not publicly available in the provided documents. No confirmed affected products, versions, or fixes are disclosed here. Monitor for updates from official advisories to obtain concrete impact, remediation, and exploitation information.

CVE-2024-39753

CVE-2024-39753 involves a modOSCE SQL Injection in Trend Micro Apex One (and Apex One as a Service) that can lead to remote code execution. Affected component is the client management functionality; the vulnerability arises from unsafely built SQL queries using untrusted input. Exploitation requi...

CVE-2024-58105

CVE-2024-58105 concerns the Trend Micro Apex One Security Agent Plug-in User Interface Manager. The connected sources describe a local vulnerability that enables a low-privilege attacker who already has code execution on the targeted system to bypass security protections and execute arbitrary cod...

CVE-2022-44649

Trend Micro Apex One and Apex One as a Service are affected by CVE-2022-44649 due to an out-of-bounds access in the Unauthorized Change Prevention service. The vulnerability can allow a local attacker who already has low-privilege code execution to elevate privileges on affected installations. Im...

CVE-2022-44653

The CVE-2022-44653 entry describes a directory-traversal vulnerability in Trend Micro Apex One and Apex One as a Service, stemming from the Security Agent. A local attacker who can execute code with low privileges could escalate privileges on affected installations. The issue affects Trend Micro ...

CVE-2024-52047

The provided connected advisories for CVE-2024-52047 documents a local file inclusion/RCE flaw in Trend Micro Apex One’s getWidgetPoolManager. The root cause is improper validation of user-supplied data before passing it to a PHP include function, enabling remote code execution when an attacker c...

CVE-2024-55632

Trend Micro Apex One is affected by CVE-2024-55632. The vulnerability exists in the Apex One Security Agent/RealTime Scan service, where a local attacker can abuse a symbolic link to create arbitrary files, enabling local privilege escalation to SYSTEM. Attacker must first run low-privileged code...

CVE-2023-32552

Technical details about CVE-2023-32552 are not publicly provided in the supplied documents; monitor for updates from official advisories and CNVD/NVD entries for affected products, impact, and remediations.

CVE-2022-44650

CVE-2022-44650 involves a memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service, enabling a local attacker who can execute low-privileged code to elevate privileges. Affected products are Trend Micro Apex One and Apex One a...

CVE-2023-47194

CVE-2023-47194 describes an origin validation vulnerability in the Trend Micro Apex One security agent that could let a local attacker escalate privileges on affected installations. The vulnerability requires the attacker to execute low-privilege code locally on the target system. The issue is pa...

CVE-2023-47200

The connected Red Hat and NVD entries confirm a vulnerability in Trend Micro Apex One: a plug‑in manager origin validation issue that could allow a local attacker who can execute low‑privileged code to escalate privileges on affected installations. The defect is tied to CVE-2023-47200 (and is sim...

CVE-2023-32557

CVE-2023-32557 corresponds to a path traversal vulnerability in Trend Micro Apex One and Apex One as a Service that allows an unauthenticated attacker to upload an arbitrary file to the Management Server, enabling remote code execution with system privileges. The issue is documented across multip...

CVE-2024-52049

Technical details the provided documents do not disclose publicly (affected product specifics, root-cause, versions, or fixes). Monitor for updates from vendors and security advisories.

CVE-2023-25146

CVE-2023-25146 is a local vulnerability in Trend Micro Apex One agent where a security agent link following flaw could let an attacker who already has low-privilege code execution quarantine a file, delete the original folder, and replace it with a junction to an arbitrary location, resulting in ...

CVE-2023-47195

CVE-2023-47195 is an origin validation vulnerability in the Trend Micro Apex One security agent that could allow a local attacker to escalate privileges on affected installations. The issue requires the attacker to first run low-privilege code on the target system. The vulnerability is characteri...

CVE-2023-52090

CVE-2023-52090 represents a local privilege escalation in Trend Micro Apex One, affecting the Virus Scan Engine. The vulnerability enables a low-privileged local attacker to escalate to SYSTEM by abusing a link-following flaw via mounting and exploiting the VSApiNt driver to delete a file. Public...

CVE-2023-34145

The connected Nessus plugin for Trend Micro Apex One (000293322) confirms CVE-2023-34145 affects Trend Micro Apex One and Apex One as a Service, due to an untrusted search path vulnerability that allows local privilege escalation. Exploitation requires the attacker to already run low-privilege co...

CVE-2024-55631

CVE-2024-55631 affects Trend Micro Apex One stack (Engine Link following vulnerability). The issue allows a local attacker who can execute low-privileged code to escalate privileges on affected installations, potentially to SYSTEM, per multiple advisories. Exploitation reportedly does not require...

CVE-2023-32555

CVE-2023-32555 concerns Trend Micro Apex One and Apex One as a Service agent. It describes a Time-of-Check Time-Of-Use vulnerability that could allow a local attacker to escalate privileges on affected installations, requiring the attacker to first run low-privileged code. The provided documents ...

CVE-2026-34928

CVE-2026-34928 affects the Apex One/SEP agent with an origin validation flaw in a named-pipe communication path that can let a local attacker escalate privileges after gaining low-privilege code execution. The vulnerability relies on improper validation in inter-process communication, enabling pr...

CVE-2023-52330

CVE-2023-52330 describes a cross-site scripting vulnerability in Trend Micro Apex Central. The issue affects the Apex Central web interface and allows a remote attacker to execute arbitrary code in the context of the compromised user after the user visits a crafted page/file. Some sources (ZDI-24...