Privilege Escalation Vulnerability in Trend Micro Apex One Security Agent
CVE-2023-47200
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 23 January 2024
What is CVE-2023-47200?
A plug-in manager origin validation vulnerability exists within the Trend Micro Apex One security agent, which may enable a local attacker to escalate their privileges on systems with affected installations. To successfully exploit this vulnerability, an attacker needs to first execute low-privileged code on the target system. This introduces potential risks, as unauthorized actions and access could be gained if the vulnerability is exploited effectively. The issue parallels another vulnerability but has unique characteristics that render it a distinct concern for users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Trend Micro Apex One 2019 (14.0) < 14.0.0.12526
Trend Micro Apex One as a Service SaaS < 14.0.12737
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved