CVE-2021-42106

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42105 and 42107.

• CWE-269

• https://success.trendmicro.com/solution/000289229Patch, Vendor Advisory
• https://success.trendmicro.com/solution/000289230Patch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-1218/Third Party Advisory, VDB Entry
• https://success.trendmicro.com/solution/000289229Patch, Vendor Advisory
• https://success.trendmicro.com/solution/000289230Patch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-1218/Third Party Advisory, VDB Entry

Published

Oct 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4210A potential vulnerability in the SMI callback function used …6.7
• CVE-2021-42101An uncontrolled search path element vulnerabilities in Trend…7.8
• CVE-2021-42102An uncontrolled search path element vulnerabilities in Trend…7.8
• CVE-2021-42103An uncontrolled search path element vulnerabilities in Trend…7.8
• CVE-2021-42104Unnecessary privilege vulnerabilities in Trend Micro Apex On…7.8
• CVE-2021-42105Unnecessary privilege vulnerabilities in Trend Micro Apex On…7.8
• CVE-2021-42107Unnecessary privilege vulnerabilities in Trend Micro Apex On…7.8
• CVE-2021-42108Unnecessary privilege vulnerabilities in the Web Console of …7.8
• CVE-2021-42109VITEC Exterity IPTV products through 2021-04-30 allow privil…9.8
• CVE-2021-4211A potential vulnerability in the SMI callback function used …6.7
• CVE-2021-42110An issue was discovered in Allegro Windows (formerly Popsy W…7.8
• CVE-2021-42111An issue was discovered in the RCDevs OpenOTP app 1.4.13 and…5.5