CVE-2021-42101: Trend Micro Apex One

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar but not identical to CVE-2021-42103.

Affected products

• Trend Micro Apex One: version 2019 only

Published 2021-10-21. Last modified 2026-06-17.