Lucene search

K
zdiSimon Zuckerbraun - Trend Micro Zero Day InitiativeZDI-22-1619
HistoryNov 21, 2022 - 12:00 a.m.

Trend Micro Apex One Unauthorized Change Prevention Service Out-Of-Bounds Access Local Privilege Escalation Vulnerability

2022-11-2100:00:00
Simon Zuckerbraun - Trend Micro Zero Day Initiative
www.zerodayinitiative.com
15
trend micro
apex one
unauthorized change prevention
out-of-bounds access
local privilege escalation
vulnerability
low-privileged code
data structure
arbitrary code
system

EPSS

0

Percentile

15.9%

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Unauthorized Change Prevention Service. A crafted request can trigger a write past the end of an allocated data structure. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

EPSS

0

Percentile

15.9%

Related for ZDI-22-1619