CVE-2022-36336
High
Description
A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations. The resolution for this issue has been deployed automatically via ActiveUpdate to customers in an updated Spyware pattern. Customers who are up-to-date on detection patterns are not required to take any additional steps to mitigate this issue.
SeverityHigh
CVSS7.8
Exploit probability—
ProductTrendmicro Apex One
PublishedJul 30, 2022
First seenJul 30, 2022
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro apex_one | No range specified, 2019 | — |
| trendmicro worry-free_business_security | 10.0 | — |
| trendmicro worry-free_business_security_services | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.