Local Privilege Escalation Vulnerability in Trend Micro Apex One and Security Products
CVE-2022-24679
7.8HIGH
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 24 February 2022
What is CVE-2022-24679?
A local privilege escalation vulnerability in Trend Micro's Apex One and Worry-Free Business Security products could allow an attacker to create a writable folder in an arbitrary location. Exploiting this vulnerability requires prior access to execute low-privileged code on the target system, potentially enabling the attacker to escalate their privileges and gain greater control over the affected installations.
Affected Version(s)
Trend Micro Apex One 2019, SaaS
Trend Micro Worry-Free Business Security 10.0 SP1, Services (SaaS)