#privilege-escalation
8 articles
CVE-2026-32996: High-Severity Arbitrary File Write / Privilege Escalation in Veeam
Second high-severity vulnerability in the Veeam bundle - affects Service Provider Console (9.x < 9.2.0.33215) and Backup & Replication (13.x < 13.0.1.2067), allows arbitrary file write and escalation...
CVE-2026-34927: Local Privilege Escalation in Trend Micro Apex One / Vision One SEP Agent
Origin validation vulnerability in Trend Micro Apex One / Vision One SEP agent (builds < 14.0.20731) - a local attacker with low privileges can escalate privileges. First of 7 similar LPEs in bulletin KA-0023430...
CVE-2026-34928: LPE in Trend Micro Apex One / Vision One SEP Agent (Named Pipe)
Origin validation vulnerability in another named pipe mechanism in the Apex One/SEP agent - LPE 7.8. Part of the 8-CVE set in bulletin KA-0023430...
CVE-2026-34929: LPE in Trend Micro Apex One / Vision One SEP Agent (IPC)
Origin validation vulnerability in another IPC mechanism in the Apex One/SEP agent - LPE 7.8. Third of 7 similar LPEs in bulletin KA-0023430...
CVE-2026-34930: LPE in Trend Micro Apex One / Vision One SEP Agent (Process Protection)
Origin validation vulnerability in another process protection mechanism in the Apex One/SEP agent - LPE 7.8. Fourth of 7 similar LPEs in bulletin KA-0023430...
CVE-2026-45206: LPE in Trend Micro Apex One / Vision One SEP Agent
Origin validation vulnerability in another process protection communication mechanism in the Apex One/SEP agent - LPE 7.8. Fifth of 7 similar LPEs in bulletin KA-0023430...
CVE-2026-45207: LPE in Trend Micro Apex One / Vision One SEP Agent
Origin validation vulnerability in another process protection communication mechanism in the Apex One/SEP agent - LPE 7.8. Sixth of 7 similar LPEs in bulletin KA-0023430...
CVE-2026-45208: TOCTOU LPE in Trend Micro Apex One / Vision One SEP Agent
Time-of-Check Time-of-Use (TOCTOU, CWE-367) vulnerability in the Apex One/SEP agent - local privilege escalation. Last of 8 vulnerabilities in bulletin KA-0023430 (different class from the other 7 origin validation flaws)...