CVE-2022-41745: Trend Micro Apex One

High severity, CVSS 7.0. EPSS: 0.7% chance of exploitation in the next 30 days.

An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

  • Trend Micro Apex One: affected versions not specified; version 2019 only

Published 2022-10-10. Last modified 2026-06-17.