Local Privilege Escalation in Trend Micro Apex One Agent
CVE-2023-52094
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 23 January 2024
What is CVE-2023-52094?
A vulnerability exists within the updater mechanism of the Trend Micro Apex One agent, which can be exploited by local attackers. This flaw allows unauthorized users with low-privileged access to manipulate the updater to delete arbitrary folders on compromised installations. Successful exploitation requires the attacker to first gain execution access to low-privileged code on the affected system, potentially leading to a local privilege escalation scenario. remediation actions should be taken to address this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Trend Micro Apex One 2019 (14.0) < 14.0.0.12534
Trend Micro Apex One as a Service SaaS < 14.0.12849
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved