CVE-2022-41747

CVE-2022-41747 describes an improper certification validation vulnerability in Trend Micro Apex One agents, affecting both Microsoft Windows and Trend Micro Apex One installations. This flaw allows a local attacker, who has already gained low-privileged code execution, to load a malicious DLL with system service privileges. Rated with a CVSS score of 7.8 (HIGH), the vulnerability has a low attack complexity and requires local access, but can lead to high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, and no public exploit code or significant community discussion has been observed.