DeutschShown in its original language — a full translation is planned for a future version.
Trend Micro Apex One: Mehrere Schwachstellen
view advisory published 2022-11-21
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und seine Privilegien zu erweitern.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-44654US | high7.5 | — | ||
Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps t… | ||||
| CVE-2022-44653US | high7.8 | — | ||
A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations.… | ||||
| CVE-2022-44652US | high7.8 | — | ||
An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected insta… | ||||
| CVE-2022-44651US | high7.0 | — | ||
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.… | ||||
| CVE-2022-44650US | high7.8 | — | ||
A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privileges… | ||||
| CVE-2022-44649US | high7.8 | — | ||
An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privil… | ||||
| CVE-2022-44648US | medium5.5 | — | ||
An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations.
P… | ||||
| CVE-2022-44647US | medium5.5 | — | ||
An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations.
P… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan