Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2020-24557: Trend Micro Multiple Products Improper Access Control Vulnerability

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege escalation.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-24557 Trend Micro
Related: CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Known Exploited Vulnerabilities · May 21, 2026
CVE-2025-54948: Trend Micro Apex One OS Command Injection Vulnerability Known Exploited Vulnerabilities · Aug 18, 2025
CVE-2023-41179: Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Sep 21, 2023