CVE-2021-44023

A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service.

• CWE-59

• https://helpcenter.trendmicro.com/en-us/article/tmka-10867Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-1536/Third Party Advisory, VDB Entry
• https://helpcenter.trendmicro.com/en-us/article/tmka-10867Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-1536/Third Party Advisory, VDB Entry

Published

Dec 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44018A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2021-44019An unnecessary privilege vulnerability in Trend Micro Worry-…7.8
• CVE-2021-4402The Multiple Roles plugin for WordPress is vulnerable to Cro…4.3
• CVE-2021-44020An unnecessary privilege vulnerability in Trend Micro Worry-…7.8
• CVE-2021-44021An unnecessary privilege vulnerability in Trend Micro Worry-…7.8
• CVE-2021-44022A reachable assertion vulnerability in Trend Micro Apex One …5.5
• CVE-2021-44024A link following denial-of-service vulnerability in Trend Mi…7.1
• CVE-2021-44025Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to …6.1
• CVE-2021-44026Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to …9.8
• CVE-2021-44028XXE can occur in Quest KACE Desktop Authority before 11.2 be…5.5
• CVE-2021-44029An issue was discovered in Quest KACE Desktop Authority befo…9.8
• CVE-2021-4403The Remove Schema plugin for WordPress is vulnerable to Cros…4.3