CVE-2021-42106

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified) Trend Micro Apex One as a Service (affected versions not specified) Trend Micro Worry-Free Business Security 10.0 SP1 (affected versions not specified) Trend Micro Worry-Free Business Security Services (affected versions not specified)

Description The issue allows a local attacker to escalate privileges on affected installations, given that the attacker can first execute low-privileged code on the target system.

Recommendations For Trend Micro Apex One, consider restricting access to sensitive areas of the system until a fix is available. For Trend Micro Apex One as a Service, restrict privileges to the minimum required for operation. For Trend Micro Worry-Free Business Security 10.0 SP1, limit user privileges to prevent escalation. For Trend Micro Worry-Free Business Security Services, apply the principle of least privilege to all users. At the moment, there is no information about a newer version that contains a fix for this vulnerability.