Trend Micro Released Security Updates -10 November 2022

The released security updates resolve several vulnerabilities having severity ratings from medium to high. The attacker could exploit some of these vulnerabilities to obtain sensitive information or gain privileged access on the affected system.

Samples of the addressed vulnerabilities:

1. Security Agent Time-of-Check Time-of-Use Privilege Escalation Vulnerability (CVE-2022-44651):
   • CVSS: 7.8
   • Attack Vector: Local
   • Attack Complexity: Low
   • Privileges Required: Low
   • User Interaction: None
   • Consequences: Gain Privileges
     
     
2. Improper Handling of Exceptional Conditions Privilege Escalation Vulnerability (CVE-2022-44652):
   • CVSS: 7.8
   • Attack Vector: Local
   • Attack Complexity: Low
   • Privileges Required: Low
   • User Interaction: None
   • Consequences: Gain Privileges