CVE-2020-8468

KEV

Trend Micro Multiple Products Content Validation Escape Vulnerability

Vendor / Project: Trend Micro
Product: Apex One, OfficeScan and Worry-Free Business Security Agents
Date added: Nov 3, 2021
Due date: May 3, 2022
Known ransomware use: Unknown
CWEs: CWE-74

Description

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-8468