Local Privilege Escalation Vulnerability in Trend Micro Apex One and Security Products

CVE-2022-24679

Summary

A local privilege escalation vulnerability in Trend Micro's Apex One and Worry-Free Business Security products could allow an attacker to create a writable folder in an arbitrary location. Exploiting this vulnerability requires prior access to execute low-privileged code on the target system, potentially enabling the attacker to escalate their privileges and gain greater control over the affected installations.

References