CVE-2021-36742: high-severity vulnerability in Trend Micro Apex One

A flaw in how Trend Micro security software validates user input allows someone with basic access to a computer to gain administrator-level control. An attacker must already have the ability to run code on the system to exploit this.

The vulnerability exists in input validation routines within Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1, allowing privilege escalation from low-privileged user context to system or administrator level. Attack vector is local; pre-condition requires prior code execution capability on the target system. Impact includes complete system compromise through elevated privileges.