CVE-2020-24557
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security
Trend Micro Multiple Products Improper Access Control Vulnerability
What it is
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege escalation.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Trend Micro entries on the list
- Apex One Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability CVE-2026-34926 · May 21, 2026
- Apex One Trend Micro Apex One OS Command Injection Vulnerability CVE-2025-54948 · Aug 18, 2025
- Apex One and Worry-Free Business Security Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability CVE-2023-41179 · Sep 21, 2023
- Apex One and Apex One as a Service Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability CVE-2022-40139 · Sep 15, 2022
- Apex Central Trend Micro Apex Central Arbitrary File Upload Vulnerability CVE-2022-26871 · Mar 31, 2022
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36742 · Nov 3, 2021