Local Privilege Escalation in Trend Micro Apex One Security Agent
CVE-2023-34146
What is CVE-2023-34146?
An exposed dangerous function vulnerability exists in the Trend Micro Apex One and Apex One as a Service security agent. This flaw enables a local attacker with the ability to execute low-privileged code to escalate their privileges, potentially allowing them to write arbitrary values to specific Trend Micro agent subkeys on the affected systems. It is essential for organizations using these products to apply necessary defenses and stay informed, especially since this vulnerability shares similarities with other recent vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Trend Micro Apex One 2019 < 14.0.0.12033
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved