CVE-2022-24671

A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a local attacker to modify a file during the update process and escalate their privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

• CWE-59

• https://helpcenter.trendmicro.com/en-us/article/TMKA-10937Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-371/Third Party Advisory, VDB Entry
• https://helpcenter.trendmicro.com/en-us/article/TMKA-10937Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-371/Third Party Advisory, VDB Entry

Published

Feb 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24666A program using swift-nio-http2 is vulnerable to a denial of…7.5
• CVE-2022-24667A program using swift-nio-http2 is vulnerable to a denial of…7.5
• CVE-2022-24668A program using swift-nio-http2 is vulnerable to a denial of…7.5
• CVE-2022-24669It may be possible to gain some details of the deployment th…6.5
• CVE-2022-2467A vulnerability has been found in SourceCodester Garage Mana…9.8
• CVE-2022-24670An attacker can use the unrestricted LDAP queries to determi…6.5
• CVE-2022-24672This vulnerability allows network-adjacent attackers to exec…8.8
• CVE-2022-24673This vulnerability allows remote attackers to execute arbitr…9.8
• CVE-2022-24674This vulnerability allows network-adjacent attackers to exec…8.8
• CVE-2022-24675encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 ha…7.5
• CVE-2022-24676update_code in Admin.php in HYBBS2 through 2.3.2 allows arbi…8.8
• CVE-2022-24677Admin.php in HYBBS2 through 2.3.2 allows remote code executi…9.8