CVE-2022-24679

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create an writable folder in an arbitrary location and escalate privileges affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

• CWE-59

• https://success.trendmicro.com/solution/000290464Patch, Vendor Advisory
• https://success.trendmicro.com/solution/000290486Patch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-370/Third Party Advisory, VDB Entry
• https://success.trendmicro.com/solution/000290464Patch, Vendor Advisory
• https://success.trendmicro.com/solution/000290486Patch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-370/Third Party Advisory, VDB Entry

Published

Feb 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24673This vulnerability allows remote attackers to execute arbitr…9.8
• CVE-2022-24674This vulnerability allows network-adjacent attackers to exec…8.8
• CVE-2022-24675encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 ha…7.5
• CVE-2022-24676update_code in Admin.php in HYBBS2 through 2.3.2 allows arbi…8.8
• CVE-2022-24677Admin.php in HYBBS2 through 2.3.2 allows remote code executi…9.8
• CVE-2022-24678An security agent resource exhaustion denial-of-service vuln…7.5
• CVE-2022-2468A vulnerability was found in SourceCodester Garage Managemen…8.8
• CVE-2022-24680A security link following local privilege escalation vulnera…7.8
• CVE-2022-24681Zoho ManageEngine ADSelfService Plus before 6121 allows XSS …6.1
• CVE-2022-24682An issue was discovered in the Calendar feature in Zimbra Co…6.1
• CVE-2022-24683HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1…7.5
• CVE-2022-24684HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16, 1…6.5