Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-43997 State: PUBLISHED Published: 2021-11-17T00:00:00 Last Updated: 2024-08-04T04:10:16.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve further privilege escalation by branching directly inside a FreeRTOS MPU API wrapper function with a manually crafted stack frame. These issues affect ARMv7-M MPU ports, and ARMv8-M ports with MPU support enabled (i.e. configENABLE_MPU s
stack frame. These issues affect ARMv7-M MPU ports, and ARMv8-M ports with MPU support enabled (i.e. configENABLE_MPU set to 1). These are fixed in V10.5.0 and in V10.4.3-LTS Patch 3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.4.3-LTS-Patch-2 - https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.4.6 - https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.5.0 - https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.4.3-LTS-Patch-3
CVE ID: CVE-2021-43998 State: PUBLISHED Published: 2021-11-30T14:59:08 Last Updated: 2024-08-04T04:10:17.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Vault and Vault Enterprise 0.11.0 up to 1.7.5 and 1.8.4 templated ACL policies would always match the first-created entity alias if multiple entity aliases exist for a specified entity and mount combination, potentially resulting in incorrect policy enforcement. Fixed in Vault and Vault Enterprise 1.7.6, 1.8.5, and 1.9.0. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2021-30-vaults-templated-acl-policies-matched-first-created-alias-per-entity-and-auth-backend/
uss.hashicorp.com/t/hcsec-2021-30-vaults-templated-acl-policies-matched-first-created-alias-per-entity-and-auth-backend/32132 - https://security.gentoo.org/glsa/202207-01
CVE ID: CVE-2021-43999 State: PUBLISHED Published: 2022-01-11T22:10:12 Last Updated: 2024-08-04T04:10:17.191Z Vendors: Apache Software Foundation Products: Apache Guacamole Problem Types: CWE-287 Description: Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/4dt9h5mo4o9rxlgxm3rp8wfqdtdjn2z9 - http://www.openwall.com/lists/oss-security/2022/01/11/7
CVE ID: CVE-2021-44000 State: PUBLISHED Published: 2022-02-09T15:17:07 Last Updated: 2024-08-04T04:10:17.128Z Vendors: Siemens Products: JT2Go, Solid Edge SE2021, Solid Edge SE2022, Teamcenter Visualization V13.1, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3 Problem Types: CWE-122 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll contains an out of
s < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15053) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-335/
CVE ID: CVE-2021-44001 State: PUBLISHED Published: 2021-12-14T12:06:40 Last Updated: 2024-08-04T04:10:17.157Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-787 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14974) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https:/
t Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-004/
CVE ID: CVE-2021-44002 State: PUBLISHED Published: 2021-12-14T12:06:41 Last Updated: 2024-08-04T04:10:17.089Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT Open, JT Utilities, Solid Edge Problem Types: CWE-787 Description: A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15058, ZDI-CAN-19076, ZDI-CAN-19077)
d allow an attacker to execute code in the context of the current process. (ZDI-CAN-15058, ZDI-CAN-19076, ZDI-CAN-19077) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-936212.pdf
CVE ID: CVE-2021-44003 State: PUBLISHED Published: 2021-12-14T12:06:41 Last Updated: 2024-08-04T04:10:17.126Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-457 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to use of uninitialized memory while parsing user supplied TIFF files. This could allow an attacker to cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf
CVE ID: CVE-2021-44004 State: PUBLISHED Published: 2021-12-14T12:06:42 Last Updated: 2024-08-04T04:10:17.276Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf
CVE ID: CVE-2021-44005 State: PUBLISHED Published: 2021-12-14T12:06:43 Last Updated: 2024-08-04T04:10:17.117Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-787 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf
CVE ID: CVE-2021-44006 State: PUBLISHED Published: 2021-12-14T12:06:43 Last Updated: 2024-08-04T04:10:17.155Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-787 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf
CVE ID: CVE-2021-44007 State: PUBLISHED Published: 2021-12-14T12:06:44 Last Updated: 2024-08-04T04:10:17.283Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-193 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an off-by-one error in the heap while parsing specially crafted TIFF files. This could allow an attacker to cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf
CVE ID: CVE-2021-44008 State: PUBLISHED Published: 2021-12-14T12:06:45 Last Updated: 2024-08-04T04:10:17.264Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf
CVE ID: CVE-2021-44009 State: PUBLISHED Published: 2021-12-14T12:06:46 Last Updated: 2024-08-04T04:10:17.166Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf
CVE ID: CVE-2021-44010 State: PUBLISHED Published: 2021-12-14T12:06:46 Last Updated: 2024-08-04T04:10:17.189Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf
CVE ID: CVE-2021-44011 State: PUBLISHED Published: 2021-12-14T12:06:47 Last Updated: 2024-08-04T04:10:17.163Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer while parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15101) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa
01) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-007/
CVE ID: CVE-2021-44012 State: PUBLISHED Published: 2021-12-14T12:06:48 Last Updated: 2024-08-04T04:10:17.279Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15102) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-
2) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-008/
CVE ID: CVE-2021-44013 State: PUBLISHED Published: 2021-12-14T12:06:49 Last Updated: 2024-08-04T04:10:17.233Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-787 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15103) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://
Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-009/
CVE ID: CVE-2021-44014 State: PUBLISHED Published: 2021-12-14T12:06:50 Last Updated: 2024-08-04T04:10:17.199Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT Open, JT Utilities, Solid Edge Problem Types: CWE-416 Description: A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15057, ZDI-CAN-19081) Addi
d leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15057, ZDI-CAN-19081) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-936212.pdf
CVE ID: CVE-2021-44015 State: PUBLISHED Published: 2021-12-14T12:06:50 Last Updated: 2024-08-04T04:10:17.299Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The VCRUNTIME140.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted CGM files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15109) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/p
AN-15109) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-010/
CVE ID: CVE-2021-44016 State: PUBLISHED Published: 2022-02-09T15:17:09 Last Updated: 2024-08-04T04:10:17.279Z Vendors: Siemens Products: JT2Go, Solid Edge SE2021, Solid Edge SE2022, Teamcenter Visualization V13.1, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3 Problem Types: CWE-119 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerab
s < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerable to memory corruption condition while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15110) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-338/
CVE ID: CVE-2021-44017 State: PUBLISHED Published: 2021-12-14T12:06:51 Last Updated: 2024-08-04T04:10:17.369Z Vendors: Siemens Products: JT2Go, Teamcenter Visualization Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Image.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted TIF files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15111) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-
1) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-011/
CVE ID: CVE-2021-44018 State: PUBLISHED Published: 2022-02-09T15:17:10 Last Updated: 2024-08-04T04:10:17.421Z Vendors: Siemens Products: JT2Go, Solid Edge SE2021, Solid Edge SE2022, Teamcenter Visualization V13.1, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3 Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerab
s < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerable to memory corruption condition while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15112) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-340/
CVE ID: CVE-2021-44019 State: PUBLISHED Published: 2021-12-03T10:50:10 Last Updated: 2024-08-04T04:10:17.188Z Vendors: Trend Micro Products: Trend Micro Worry-Free Business Security Problem Types: Improper Privilege Management Description: An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44020 and 44021. Additional Analyst Notes: - CVE Program Container: References:
similar to but not identical to CVE-2021-44020 and 44021. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289230 - https://www.zerodayinitiative.com/advisories/ZDI-21-1364/
CVE ID: CVE-2021-44020 State: PUBLISHED Published: 2021-12-03T10:50:11 Last Updated: 2024-08-04T04:10:17.310Z Vendors: Trend Micro Products: Trend Micro Worry-Free Business Security Problem Types: Improper Privilege Management Description: An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44021. Additional Analyst Notes: - CVE Program Container: References:
similar to but not identical to CVE-2021-44019 and 44021. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289230 - https://www.zerodayinitiative.com/advisories/ZDI-21-1365/
CVE ID: CVE-2021-44021 State: PUBLISHED Published: 2021-12-03T10:50:11 Last Updated: 2024-08-04T04:10:17.287Z Vendors: Trend Micro Products: Trend Micro Worry-Free Business Security Problem Types: Improper Privilege Management Description: An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44020. Additional Analyst Notes: - CVE Program Container: References:
similar to but not identical to CVE-2021-44019 and 44020. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289230 - https://www.zerodayinitiative.com/advisories/ZDI-21-1366/
CVE ID: CVE-2021-44022 State: PUBLISHED Published: 2021-12-03T10:50:12 Last Updated: 2024-08-04T04:10:17.161Z Vendors: Trend Micro Products: Trend Micro Apex One Problem Types: Reachable Assertion Denial-of-Service Description: A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service (DoS). Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289229
CVE ID: CVE-2021-44023 State: PUBLISHED Published: 2021-12-16T02:28:35 Last Updated: 2024-08-04T04:10:17.277Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Link Following Denial-of-Service Description: A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-10867 - https://www.zerodayinitiative.com/advisories
References: - https://helpcenter.trendmicro.com/en-us/article/tmka-10867 - https://www.zerodayinitiative.com/advisories/ZDI-21-1536/
CVE ID: CVE-2021-44024 State: PUBLISHED Published: 2022-01-08T15:51:04 Last Updated: 2024-08-04T04:10:17.189Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro Worry-Free Business Security Problem Types: Link Following Denial-of-Service Description: A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Con
privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289996 - https://www.zerodayinitiative.com/advisories/ZDI-22-014/