Firetruck

CVE-2020-24557

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege escalation.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Trend Micro Apex OneTrend Micro / Trend Micro Apex One2009 (on premise), SaaSaffected
Trend Micro Worry-Free Business SecurityTrend Micro / Trend Micro Worry-Free Business Security10.0 SP1affected