Skip to content
COOEY

EXPOSURES › CVE-2021-36742

CVE-2021-36742

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2021-11-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-36742 ↗
⌖ EXPLOITED IN THE WILD SHAME 65/100 exploited-in-wildunpatchedprivilege-escalation

Trend Micro Apex One and Worry-Free Business Security suffered an improper input validation flaw enabling privilege escalation.

The improper input validation vulnerability in Trend Micro's Apex One and Worry-Free Business Security allowed attackers to escalate privileges, potentially compromising the entire system. DIB organizations must ensure these products are patched immediately, as the flaw was actively exploited in the wild. This failure highlights the risk of relying on security software with known, unpatched vulnerabilities.

Shame score — A privilege escalation flaw in critical endpoint security software that was actively exploited in the wild, indicating a failure to patch known vulnerabilities before they were weaponized.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Trend Micro Inc. · vendorApex One, Apex One as a Service, and Worry-Free Business Security · product
DESCRIPTION

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
CVE-2021-36742 represents a significant privilege escalation flaw across multiple Trend Micro products, indicating a critical failure in input validation that could have led to severe security breache
cooey ↗ severe-fallout -0.60
The NVD entry underscores the severity of the improper input validation vulnerability, which allows privilege escalation across multiple Trend Micro products, reflecting a critical security failure.
"Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation."
AFFECTED FEDRAMP PRODUCTS · 2
PRODUCTSTATUS
Trend Micro Cloud One for Government
Trend Micro Inc.
 In Process
Trend Micro Vision One for Government
Trend Micro Inc.
 In Process