Out-of-Bounds Read Vulnerability in Trend Micro Worry-Free Business Security Server

CVE-2022-23805

What is CVE-2022-23805?

The vulnerability in Trend Micro Worry-Free Business Security Server allows local attackers with low-privileged code execution capabilities to exploit an out-of-bounds read issue. By sending malformed data to a specific named pipe, an attacker can cause the server to crash, potentially leading to information disclosure. It is crucial for organizations to evaluate their systems and apply necessary patches to mitigate the risk associated with this vulnerability.

References