CVE:CVE-2021-25249
CNNVD:CNNVD-202102-359
Trend Micro OfficeScan XG等都是美国趋势科技（Trend Micro）公司的产品。Trend Micro OfficeScan XG是一套分布式反病毒软件。Trend Micro Apex One是一套能够提供自动威胁检测和响应功能的端点安全防护软件。Trend Micro Worry-Free Business Security是一套企业级信息安全防护解决方案。
多款 Trend Micro 产品存在缓冲区错误漏洞，攻击者可利用该漏洞升级受影响的安装的权限。以下产品及型号受到影响：Trend Micro Apex One,Trend Micro OfficeScan XG,Trend Micro Worry-Free Business Security。
solution:Upgrade trendmicro apex_one to a higher version than 2019,and avoid the version 2019; Upgrade trendmicro officescan to a higher version than xg:sp1,and avoid the version xg:sp1; Upgrade trendmicro worry-free_business_security to a higher version than 10.0:sp1,and avoid the version 10.0:sp1