An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update process.
Please note: an attacker must first obtain administrative access on the target system via another method in order to exploit this.
| Software | From | Fixed in |
|---|---|---|
| trendmicro / apex_one | - | 14.0.11960 |
| trendmicro / apex_one | 2019 | 2019.x |