14.0.10349

DATE	CVE	VULNERABILITY TITLE	RISK
2022-12-12	CVE-2022-44650	Out-of-bounds Write vulnerability in Trendmicro Apex ONE 14.0.10349/2019 A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. local low complexity trendmicro CWE-787	7.8
2022-12-12	CVE-2022-44651	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Trendmicro Apex ONE 14.0.10349/2019 A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. local high complexity trendmicro CWE-367	7.0
2022-12-12	CVE-2022-44652	Improper Handling of Exceptional Conditions vulnerability in Trendmicro Apex ONE 14.0.10349/2019 An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. local low complexity trendmicro CWE-755	7.8
2022-12-12	CVE-2022-44653	Path Traversal vulnerability in Trendmicro Apex ONE 14.0.10349/2019 A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. local low complexity trendmicro CWE-22	7.8
2022-12-12	CVE-2022-44654	Unspecified vulnerability in Trendmicro Apex ONE 14.0.10349/2019 Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps to monitor for malicious payloads. network low complexity trendmicro	7.5