Description
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Published: 2022-11-21
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-47585 A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
History

Mon, 28 Apr 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Trendmicro Apex One
cve-icon MITRE

Status: PUBLISHED

Assigner: trendmicro

Published:

Updated: 2025-04-28T18:12:22.977Z

Reserved: 2022-11-03T16:55:18.297Z

Link: CVE-2022-44651

cve-icon Vulnrichment

Updated: 2024-08-03T13:54:03.985Z

cve-icon NVD

Status : Modified

Published: 2022-12-12T13:15:15.393

Modified: 2025-04-28T19:15:45.810

Link: CVE-2022-44651

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses