CVE-2022-44649

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified) Trend Micro Apex One as a Service (affected versions not specified)

Description An out-of-bounds access vulnerability in the Unauthorized Change Prevention service could allow a local attacker to elevate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Recommendations For Trend Micro Apex One, update to a version that includes a fix for the Unauthorized Change Prevention service vulnerability. For Trend Micro Apex One as a Service, update to a version that includes a fix for the Unauthorized Change Prevention service vulnerability. As a temporary workaround, consider disabling the Unauthorized Change Prevention service until a patch is available.