Origin Validation Vulnerability in Trend Micro Apex One Could Lead to Privilege Escalation
CVE-2024-36302
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 10 June 2024
What is CVE-2024-36302?
The vulnerability in the Trend Micro Apex One security agent relates to inadequate origin validation, which could be leveraged by a local attacker to escalate privileges on impacted installations. To exploit this flaw, an attacker must first gain access to execute low-privileged code on the targeted system, making this issue particularly concerning for environments where users have limited access rights. This vulnerability bears resemblance to CVE-2024-36303 but presents its own unique set of risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Trend Micro Apex One 2019 (14.0) < 14.0.0.12980
Trend Micro Apex One as a Service SaaS < 14.0.13139
References
CVSS V3.1
Timeline
Vulnerability published