Vulnerabilities > Trendmicro

DATE CVE VULNERABILITY TITLE RISK
2021-10-06 CVE-2021-3848 Improper Privilege Management vulnerability in Trendmicro Apex ONE and Worry-Free Business Security
An arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business Security Services could allow a local attacker to create an arbitrary file with higher privileges that could lead to a denial-of-service (DoS) on affected installations.
local
low complexity
trendmicro CWE-269
2.1
2021-09-29 CVE-2021-32466 Uncontrolled Search Path Element vulnerability in Trendmicro Housecall for Home Networks
An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library.
6.9
2021-09-29 CVE-2021-36745 Improper Authentication vulnerability in Trendmicro Serverprotect 5.8/6.0
A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.
network
low complexity
trendmicro CWE-287
critical
10.0
2021-09-06 CVE-2021-36744 Improper Privilege Management vulnerability in Trendmicro products
Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service.
local
low complexity
trendmicro CWE-269
4.6
2021-08-04 CVE-2021-32464 Incorrect Default Permissions vulnerability in Trendmicro Apex ONE and Officescan
An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services could allow an attacker to modify a specific script before it is executed.
local
low complexity
trendmicro CWE-276
7.2
2021-08-04 CVE-2021-32465 Improper Preservation of Permissions vulnerability in Trendmicro Apex ONE and Officescan
An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations.
network
low complexity
trendmicro CWE-281
6.5
2021-07-29 CVE-2021-36741 Improper Input Validation vulnerability in Trendmicro products
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations.
network
low complexity
trendmicro CWE-20
6.5
2021-07-29 CVE-2021-36742 Improper Input Validation vulnerability in Trendmicro products
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations.
local
low complexity
trendmicro CWE-20
4.6
2021-07-20 CVE-2021-32463 Incorrect Permission Assignment for Critical Resource vulnerability in Trendmicro Apex ONE and Worry-Free Business Security
An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS), Worry-Free Business Security 10.0 SP1 and Worry-Free Servgices could allow a local attacker to escalate privileges and delete files with system privileges on affected installations.
local
low complexity
trendmicro CWE-732
7.2
2021-07-08 CVE-2021-32461 Incorrect Conversion between Numeric Types vulnerability in Trendmicro Password Manager
Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allow a local attacker to trigger a buffer overflow and escalate privileges on affected installations.
local
low complexity
trendmicro CWE-681
7.2