JVNDB-2022-002448

Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security agents for Windows

Trend Micro Incorporated has released a security update for Trend Micro Deep Security and Cloud One - Workload Security agents for Windows.

Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.

Windows-based agents of the following products are affected by these vulnerabilities.

Trend Micro, Inc.

• Cloud One Workload Security Version 20
• Deep Security Agent Version 20

* Information disclosure due to an Out-Of-Bounds Read vulnerabilities
* Privilege escalation due to link following vulnerability

[Apply the patch]
Apply the appropriate patch according to the information provided by the developer.

Trend Micro, Inc.

• Trend Micro Incorporated : SECURITY BULLETIN: September 2022 Security Bulletin for Trend Micro Deep Security 20 and Cloud One - Workload Security Agents

1. CVE-2022-40707
2. CVE-2022-40708
3. CVE-2022-40709
4. CVE-2022-40710

1. JVN : JVNVU#99960963
2. National Vulnerability Database (NVD) : CVE-2022-40707
3. National Vulnerability Database (NVD) : CVE-2022-40708
4. National Vulnerability Database (NVD) : CVE-2022-40709
5. National Vulnerability Database (NVD) : CVE-2022-40710

• [2022/10/11]
    Web page was published