AO
Endpoint Security
Apex One
On CISA KEVExploited in the wild
180
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 120Medium 47Low 0
Watch
Add Apex One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36303 | 7.8 | Jun 10 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: 14.0 before 14.0.13139 |
| CVE-2024-36302 | 7.8 | Jun 10 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.13139; 14.0 before 14.0.0.12980 |
| CVE-2023-52094 | 7.8 | Jan 23 | An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local… Affected: before 14.0.12849; 2019 |
| CVE-2023-52093 | 7.8 | Jan 23 | An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12849; 2019 |
| CVE-2023-52092 | 7.8 | Jan 23 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12849; 2019 |
| CVE-2023-52091 | 7.8 | Jan 23 | An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12849; 2019 |
| CVE-2023-52090 | 7.8 | Jan 23 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12849; 2019 |
| CVE-2023-47202 | 7.8 | Jan 23 | A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47201 | 7.8 | Jan 23 | A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47200 | 7.8 | Jan 23 | A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47199 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47198 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47197 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47196 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47195 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47194 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47193 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-47192 | 7.8 | Jan 23 | An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.12737; 2019 |
| CVE-2023-34148 | 7.8 | Jun 26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an… Affected: before 14.0.12518; 2019 |
| CVE-2023-34147 | 7.8 | Jun 26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an… Affected: before 14.0.12518; 2019 |
| CVE-2023-34146 | 7.8 | Jun 26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an… Affected: before 14.0.12518; 2019 |
| CVE-2023-34145 | 7.8 | Jun 26 | An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected… Affected: before 14.0.12518; 2019 |
| CVE-2023-34144 | 7.8 | Jun 26 | An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected… Affected: before 14.0.12518; 2019 |
| CVE-2023-25148 | 7.8 | Mar 10 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink,… Affected: before 14.0.11960; 2019 |
| CVE-2023-25146 | 7.8 | Mar 10 | A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder and replace with a… Affected: before 14.0.11960; 2019 |
| CVE-2023-25145 | 7.8 | Mar 10 | A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.11960; 2019 |
| CVE-2023-25144 | 7.8 | Mar 10 | An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary… Affected: before 14.0.11960; 2019 |
| CVE-2022-45798 | 7.8 | Dec 24 | A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate… Affected: 2019 |
| CVE-2022-44653 | 7.8 | Dec 12 | A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.11789; 2019 |
| CVE-2022-44652 | 7.8 | Dec 12 | An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected… Affected: before 14.0.11789; 2019 |
| CVE-2022-44650 | 7.8 | Dec 12 | A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate… Affected: before 14.0.11789; 2019 |
| CVE-2022-44649 | 7.8 | Dec 12 | An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate… Affected: before 14.0.11789; 2019 |
| CVE-2022-41747 | 7.8 | Oct 10 | An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with system service privileges on affected… Affected: 2019 (on-prem) and SaaS |
| CVE-2022-41749 | 7.8 | Oct 10 | An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations Affected: 2019 (on-prem) and SaaS |
| CVE-2022-40142 | 7.8 | Sep 19 | A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service agents could allow a local attacker to create a… Affected: 2019 |
| CVE-2022-36336 | 7.8 | Jul 29 | A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on… Affected: 2019 and SaaS |
| CVE-2022-30701 | 7.8 | May 27 | An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to craft a special configuration file to load an… Affected: before 14.0.10349; 2019 |
| CVE-2022-30700 | 7.8 | May 27 | An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected… Affected: before 14.0.10349; 2019 |
| CVE-2022-24680 | 7.8 | Feb 24 | A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: 2019 |
| CVE-2022-24679 | 7.8 | Feb 24 | A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: 2019 |
| CVE-2021-45441 | 7.8 | Jan 10 | A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over… Affected: 2019; 2019 |
| CVE-2021-45440 | 7.8 | Jan 10 | A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse… Affected: 2019; 2019 |
| CVE-2021-45231 | 7.8 | Jan 10 | A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a… Affected: 2019; 2019 |
| CVE-2021-42108 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to… Affected: 2019; 2019 |
| CVE-2021-42107 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 2019; 2019 |
| CVE-2021-42106 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 2019; 2019 |
| CVE-2021-42105 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 2019; 2019 |
| CVE-2021-42104 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 2019; 2019 |
| CVE-2021-42103 | 7.8 | Oct 21 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations Affected: 2019; 2019 |
| CVE-2021-42102 | 7.8 | Oct 21 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privileges on affected… Affected: 2019; 2019 |