CVE-2021-36742: Trend Micro Multiple Products Improper Input Validation Vulnerability
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-36742?
CVE-2021-36742 is an improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1.
How does CVE-2021-36742 impact the affected software?
CVE-2021-36742 allows a local attacker to escalate privileges on affected installations.
Which products are affected by CVE-2021-36742?
CVE-2021-36742 affects Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security 10.0 SP1.
Are there any workarounds for CVE-2021-36742?
No, there are no known workarounds for CVE-2021-36742.
Where can I find more information about CVE-2021-36742?
You can find more information about CVE-2021-36742 at the following links: [Link 1](https://success.trendmicro.com/dcx/s/solution/000287819?language=en_US), [Link 2](https://success.trendmicro.com/dcx/s/solution/000287820?language=en_US), [Link 3](https://success.trendmicro.com/jp/solution/000287796).