An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not the same as CVE-2022-44647.
2022-12-12T13:15:15.240
2025-04-29T05:15:45.637
Modified
CVSSv3.1: 5.5 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | trendmicro | apex_one | < 14.0.11789 | Yes |
Application | trendmicro | apex_one | 2019 | Yes |
Operating System | microsoft | windows | - | No |