Out-of-Bounds Read Vulnerability in Trend Micro Apex One and OfficeScan Products
CVE-2021-25248

5.5MEDIUM

Key Information:

Vendor: Trend Micro
Status: Trend Micro Apex One; Trend Micro Officescan; Trend Micro Worry-free Business Security
Vendor: CVE Published:; 4 February 2021

🔔 Create Trend Micro Vulnerability Alert

What is CVE-2021-25248?

An out-of-bounds read vulnerability exists in Trend Micro's Apex One, OfficeScan XG SP1, and Worry-Free Business Security, which may allow attackers to disclose sensitive information related to a named pipe. The exploit requires the attacker to first execute low-privileged code on the vulnerable system, potentially leading to further compromise of the system's integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch