worry-free_business_security Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/worry-free_business_security/ Sun, 26 Feb 2023 06:43:24 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png worry-free_business_security Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/worry-free_business_security/ 32 32 CVE-2020-8468 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8468/ Sun, 26 Feb 2023 06:43:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8468/ Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.

The post CVE-2020-8468 appeared first on CVE Vulnerability.

]]> Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.

The post CVE-2020-8468 appeared first on CVE Vulnerability.

]]> CVE-2020-24557 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-24557/ Sun, 26 Feb 2023 06:39:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-24557/ A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system […]

The post CVE-2020-24557 appeared first on CVE Vulnerability.

]]> A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.

The post CVE-2020-24557 appeared first on CVE Vulnerability.

]]> CVE-2020-24556 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-24556/ Sun, 26 Feb 2023 06:39:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-24556/ A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first […]

The post CVE-2020-24556 appeared first on CVE Vulnerability.

]]> A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.

The post CVE-2020-24556 appeared first on CVE Vulnerability.

]]> CVE-2021-45442 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-45442/ Thu, 23 Feb 2023 14:12:52 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-45442/ A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-2021-44024. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system […]

The post CVE-2021-45442 appeared first on CVE Vulnerability.

]]> A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-2021-44024. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2021-45442 appeared first on CVE Vulnerability.

]]> CVE-2021-45441 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-45441/ Thu, 23 Feb 2023 14:12:52 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-45441/ A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the […]

The post CVE-2021-45441 appeared first on CVE Vulnerability.

]]> A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2021-45441 appeared first on CVE Vulnerability.

]]> CVE-2021-45440 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-45440/ Thu, 23 Feb 2023 14:12:52 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-45440/ A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system […]

The post CVE-2021-45440 appeared first on CVE Vulnerability.

]]> A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2021-45440 appeared first on CVE Vulnerability.

]]> CVE-2021-45231 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-45231/ Thu, 23 Feb 2023 14:12:50 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-45231/ A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on the affected system. Please note: an attacker must first obtain […]

The post CVE-2021-45231 appeared first on CVE Vulnerability.

]]> A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on the affected system. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2021-45231 appeared first on CVE Vulnerability.

]]> CVE-2021-44020 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44020/ Thu, 23 Feb 2023 14:12:36 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44020/ An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to […]

The post CVE-2021-44020 appeared first on CVE Vulnerability.

]]> An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44021.

The post CVE-2021-44020 appeared first on CVE Vulnerability.

]]> CVE-2021-44024 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44024/ Thu, 23 Feb 2023 14:12:36 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44024/ A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in […]

The post CVE-2021-44024 appeared first on CVE Vulnerability.

]]> A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2021-44024 appeared first on CVE Vulnerability.

]]> CVE-2021-44021 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44021/ Thu, 23 Feb 2023 14:12:36 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44021/ An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to […]

The post CVE-2021-44021 appeared first on CVE Vulnerability.

]]> An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44020.

The post CVE-2021-44021 appeared first on CVE Vulnerability.

]]>