CVE-2022-44654
First published: Mon Nov 21 2022(Updated: )
Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps to monitor for malicious payloads. The affected component's memory protection mechanism has been updated to enhance product security.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Apex One | <14.0.11789 | |
| Trendmicro Apex One | =2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-44654.
What is the severity rating of CVE-2022-44654?
CVE-2022-44654 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2022-44654?
Affected software versions include Trend Micro Apex One and Apex One as a Service up to version 14.0.11789 and Trend Micro Apex One and Worry-Free Business Security 2019.
How does CVE-2022-44654 impact the affected software?
CVE-2022-44654 affects the monitor engine component of Trend Micro Apex One and Apex One as a Service, which is compiled without the /SAFESEH memory protection mechanism.
Is there a fix available for CVE-2022-44654?
Yes, Trend Micro has released an updated version of the affected component to enhance the memory protection mechanism and mitigate the vulnerability. Please refer to the provided reference link for more information.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/description
- agent/softwarecombine
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/trendmicro
- canonical/trendmicro apex one
- version/trendmicro apex one/2019