CVE-2022-41745

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Oct 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-417469.1A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installationCVE-2022-417477.8An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with systeCVE-2022-417486.7A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with adminisCVE-2022-417497.8An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected instCVE-2022-41758.8Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption viCVE-2022-417517.8Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 oCVE-2022-417578.8An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain writeCVE-2022-41768.8Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convincCVE-2022-417606.5An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Network Element Manager vCVE-2022-417616.5An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM ManaCVE-2022-417626.1An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter CVE-2022-417638.8An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authent
CVE-2022-41745: High severity, CVSS 7.0 | Vulnix