CVE-2022-36336

A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations. The resolution for this issue has been deployed automatically via ActiveUpdate to customers in an updated Spyware pattern. Customers who are up-to-date on detection patterns are not required to take any additional steps to mitigate this issue.

• CWE-59

• https://success.trendmicro.com/solution/000291267Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-1033/Third Party Advisory, VDB Entry
• https://success.trendmicro.com/solution/000291267Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-1033/Third Party Advisory, VDB Entry

Published

Jul 30, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36327Improper Limitation of a Pathname to a Restricted Directory …9.8
• CVE-2022-36328Improper Limitation of a Pathname to a Restricted Directory …4.9
• CVE-2022-36329An improper privilege management issue that could allow an a…7.5
• CVE-2022-3633A vulnerability classified as problematic has been found in …3.3
• CVE-2022-36330A buffer overflow vulnerability was discovered on firmware v…8.1
• CVE-2022-36331Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, …7.5
• CVE-2022-36337An issue was discovered in Insyde InsydeH2O with kernel 5.0 …8.2
• CVE-2022-36338An issue was discovered in Insyde InsydeH2O with kernel 5.0 …8.2
• CVE-2022-36339Improper input validation in firmware for Intel(R) NUC 8 Com…7.8
• CVE-2022-3634The Contact Form 7 Database Addon WordPress plugin before 1.…9.8
• CVE-2022-36340Unauthenticated Optin Campaign Cache Deletion vulnerability …5.3
• CVE-2022-36341Authenticated (subscriber+) plugin settings change leading t…5.4