AO
Endpoint Security
Apex One
On CISA KEVExploited in the wild
180
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 120Medium 47Low 0
Watch
Add Apex One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-47195 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.12526 |
| CVE-2023-47194 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.12526 |
| CVE-2023-47193 | 7.8 | Jan 23 | An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.12526 |
| CVE-2023-47192 | 7.8 | Jan 23 | An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations Affected: 2019 (14.0) before 14.0.0.12526 |
| CVE-2023-34148 | 7.8 | Jun 26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an… Affected: before 14.0.12518; 2019 |
| CVE-2023-34147 | 7.8 | Jun 26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an… Affected: before 14.0.12518; 2019 |
| CVE-2023-34146 | 7.8 | Jun 26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an… Affected: before 14.0.12518; 2019 |
| CVE-2023-34145 | 7.8 | Jun 26 | An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected… Affected: before 14.0.12518; 2019 |
| CVE-2023-34144 | 7.8 | Jun 26 | An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected… Affected: before 14.0.12518; 2019 |
| CVE-2023-25148 | 7.8 | Mar 10 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink,… Affected: before 14.0.11960; 2019 |
| CVE-2023-25146 | 7.8 | Mar 10 | A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder and replace with a… Affected: before 14.0.11960; 2019 |
| CVE-2023-25145 | 7.8 | Mar 10 | A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.11960; 2019 |
| CVE-2023-25144 | 7.8 | Mar 10 | An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary… Affected: before 14.0.11960; 2019 |
| CVE-2022-45798 | 7.8 | Dec 24 | A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate… Affected: 2019 |
| CVE-2022-44653 | 7.8 | Dec 12 | A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations Affected: before 14.0.11789; 2019 |
| CVE-2022-44652 | 7.8 | Dec 12 | An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected… Affected: before 14.0.11789; 2019 |
| CVE-2022-44650 | 7.8 | Dec 12 | A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate… Affected: before 14.0.11789; 2019 |
| CVE-2022-44649 | 7.8 | Dec 12 | An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate… Affected: before 14.0.11789; 2019 |
| CVE-2022-41747 | 7.8 | Oct 10 | An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with system service privileges on affected… Affected: 2019 (on-prem) and SaaS |
| CVE-2022-41749 | 7.8 | Oct 10 | An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations Affected: 2019 (on-prem) and SaaS |
| CVE-2022-40142 | 7.8 | Sep 19 | A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service agents could allow a local attacker to create a… Affected: 2019 |
| CVE-2022-36336 | 7.8 | Jul 29 | A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on… Affected: 2019 and SaaS |
| CVE-2022-30701 | 7.8 | May 27 | An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to craft a special configuration file to load an… Affected: before 14.0.10349; 2019 |
| CVE-2022-30700 | 7.8 | May 27 | An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected… Affected: before 14.0.10349; 2019 |
| CVE-2022-24680 | 7.8 | Feb 24 | A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: 2019 |
| CVE-2022-24679 | 7.8 | Feb 24 | A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: 2019 |
| CVE-2021-45441 | 7.8 | Jan 10 | A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over… Affected: 2019; 2019 |
| CVE-2021-45440 | 7.8 | Jan 10 | A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse… Affected: 2019; 2019 |
| CVE-2021-45231 | 7.8 | Jan 10 | A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a… Affected: 2019; 2019 |
| CVE-2021-42108 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to… Affected: 2019; 2019 |
| CVE-2021-42107 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 2019; 2019 |
| CVE-2021-42106 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 2019; 2019 |
| CVE-2021-42105 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 2019; 2019 |
| CVE-2021-42104 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 2019; 2019 |
| CVE-2021-42103 | 7.8 | Oct 21 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations Affected: 2019; 2019 |
| CVE-2021-42102 | 7.8 | Oct 21 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privileges on affected… Affected: 2019; 2019 |
| CVE-2021-42101 | 7.8 | Oct 21 | An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations Affected: 2019; 2019 |
| CVE-2021-42012 | 7.8 | Oct 21 | A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate… Affected: 2019; 2019 |
| CVE-2021-42011 | 7.8 | Oct 21 | An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected… Affected: 2019; 2019 |
| CVE-2021-32464 | 7.8 | Aug 4 | An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services could allow an… Affected: 2019 |
| CVE-2021-32463 | 7.8 | Jul 20 | An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS), Worry-Free Business Security 10.0 SP1 and Worry-Free… Affected: 2019 |
| CVE-2021-28645 | 7.8 | Apr 13 | An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on… Affected: 2019; 2019 |
| CVE-2021-25253 | 7.8 | Apr 13 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local… Affected: 2019; 2019 |
| CVE-2021-25250 | 7.8 | Apr 13 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to… Affected: 2019; 2019 |
| CVE-2021-25249 | 7.8 | Feb 4 | An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services)… Affected: 2019 |
| CVE-2020-28572 | 7.8 | Nov 18 | A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a… Affected: 2019 |
| CVE-2020-25773 | 7.8 | Sep 29 | A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products Affected: 2019; saas |
| CVE-2020-24563 | 7.8 | Sep 29 | A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then could be manipulated… Affected: 2019; saas |
| CVE-2020-24559 | 7.8 | Sep 1 | A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain… Affected: 2019; saas |
| CVE-2020-24556 | 7.8 | Sep 1 | A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an… Affected: 2019; saas |