Live › vulnerability › CVE-2020-24557
Go to dashboardTrend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Windows contain an improper access control flaw that lets a local user manipulate a product folder to temporarily disable security and abuse a Windows function. An attacker who already runs low-privileged code on the machine can escalate to higher privileges, and CISA lists it as exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 0h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Trend Micro Apex One, OfficeScan, and Worry-Free Business Security | vendor | – | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
This page as .md · .json · in your agent: get_signal("CVE-2020-24557")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.