Alexander Pudwill
·
Published
2025-06-17
·
Updated
2025-06-18
·
CVE-2025-49154
8.7
High
| Base vector | Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Trend Micro Apex One (affected versions not specified)
Trend Micro Worry-Free Business Security (affected versions not specified)
Description:
An insecure access control issue could allow a local attacker to overwrite key memory-mapped files, potentially having severe consequences for the security and stability of affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control