CVE-2022-36336: Trend Micro Apex One

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations. The resolution for this issue has been deployed automatically via ActiveUpdate to customers in an updated Spyware pattern. Customers who are up-to-date on detection patterns are not required to take any additional steps to mitigate this issue.

Affected products

• Trend Micro Apex One: affected versions not specified; version 2019 only
• Trend Micro Worry-Free Business Security: version 10.0 only
• Trend Micro Worry-Free Business Security Services: affected versions not specified

Published 2022-07-30. Last modified 2026-06-17.