High severity7.8NVD Advisory· Published Oct 21, 2021· Updated Jun 17, 2026

CVE-2021-42102

Description

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Apex One3 versions
cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
- cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:saas:*:*:*
- (no CPE)
Trend Micro/Apex One As A Servicellm-fuzzy
Trend Micro/Trend Microcpe-rescue
Range: 2019, SaaS

Patches

Vulnerability mechanics

References

success.trendmicro.com/solution/000289229nvdPatchVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-21-1222/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000