Summary
Ein Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um beliebigen Programmcode auszuführen, und um seine Privilegien zu erhöhen.
Product
Trend Micro Apex One ist eine Endpoint-Security Lösung.
Vulnerabilities 8
-
Critical 9.8
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code a…
-
Critical 9.8
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code a…
-
High 7.8
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privile…
-
High 7.8
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on…
-
High 7.8
An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local atta…
-
High 7.8
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local a…
-
High 7.8
An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow …
-
High 7.0
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification …
Revision history
-
#3
Referenz(en) aufgenommen: EUVD-2025-209914, EUVD-2025-209912, EUVD-2025-209917, EUVD-2025-209916, EUVD-2025-209915, EUVD-2025-209913, EUVD-2025-209909, EUVD-2025-209911
-
#2
Referenz(en) aufgenommen: ZDI-26-142, ZDI-26-143, ZDI-26-136, ZDI-26-137, ZDI-26-138, ZDI-26-139, ZDI-26-140, ZDI-26-141
-
#1
Initiale Fassung
References
-
Trend Micro Security Advisory vom 2026-02-24
https://success.trendmicro.com/en-US/solution/KA-0022458