CISA Known Exploited Vulnerability

CVE-2020-8468

Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents

Trend Micro Multiple Products Content Validation Escape Vulnerability

Date added
BOD 22-01 due date
CWE CWE-74
Ransomware Unknown

CISA description

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.

Required action

Apply updates per vendor instructions.