CVE-2022-41748: 
Trend Micro Apex One Agent vulnerability analysis and mitigation

A registry permissions vulnerability was identified in the Trend Micro Apex One Data Loss Prevention (DLP) module. The vulnerability, tracked as CVE-2022-41748, could allow a local attacker with administrative credentials to bypass certain elements of the product's anti-tampering mechanisms on affected installations (CVE Mitre).

The vulnerability specifically affects the registry permissions in the Data Loss Prevention (DLP) module of Trend Micro Apex One. To exploit this vulnerability, an attacker must first obtain administrative credentials on the target system. The issue is related to the product's anti-tampering mechanisms, which can be circumvented through improper registry permission configurations (CERT-FR).

The vulnerability allows a local attacker with administrative credentials to bypass certain elements of the product's anti-tampering mechanisms, potentially compromising the security features of the DLP module (CVE Mitre).

Trend Micro has addressed this vulnerability in Apex One (on-prem) by releasing versions CP 11110/11102 and later. For Apex One (SaaS), the fix was included in the September 2022 monthly update (CERT-FR).