https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:58:03.014894+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05902 bdu:2022-05902 2026-10-05T03:58:03.037023+00:00 bdu:2022-05902 https://cve.radiocsirt.org/vuln/certfr-2022-avi-817 certfr-2022-avi-817 — De multiples vulnérabilités ont été découvertes dans Trend Micro Apex One. Certaines d'entre elles permettent à un atta… 2026-10-05T03:58:03.037061+00:00 certfr-2022-avi-817 https://cve.radiocsirt.org/vuln/euvd-2026-19317 EUVD-2026-19317 2026-10-05T03:58:03.037081+00:00 EUVD-2026-19317 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40143 fkie_cve-2022-40143 2026-10-05T03:58:03.037094+00:00

A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow a local attacker to abuse an insecure directory that could allow a low-privileged user to run arbitrary code with elevated privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-2pfr-2xmv-j9v4 GHSA-2pfr-2xmv-j9v4 2026-10-05T03:58:03.037122+00:00

A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow a local attacker to abuse an insecure directory that could allow a low-privileged user to run arbitrary code with elevated privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-40143 gsd-2022-40143 2026-10-05T03:58:03.037138+00:00 gsd-2022-40143 https://cve.radiocsirt.org/vuln/jvndb-2022-000071 jvndb-2022-000071 2026-10-05T03:58:03.037149+00:00

Trend Micro Apex One and Trend Micro Apex One as a Service provided by Trend Micro Incorporated contain multiple vulnerabilities listed below. * Improper validation in some components of the rollback mechanism (CWE-20) - CVE-2022-40139 * Improper access control (CWE-284) - CVE-2022-40140 * Information exposure (CWE-200) - CVE-2022-40141 * Improper link resolution before file access (CWE-59) - CVE-2022-40142 * Improper link resolution before file access (CWE-59) - CVE-2022-40143 * Improper authentication (CWE-287) - CVE-2022-40144 Trend Micro Incorporated states that attacks exploiting CVE-2022-40139 have been observed. CVE-2022-40139, CVE-2022-40140, CVE-2022-40141, CVE-2022-40142, CVE-2022-40143 Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. CVE-2022-40144 Akinori Takeuchi of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.