Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-36303

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trendmicro

Description

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2024-36302.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trend Micro, Inc. Trend Micro Apex One

  • 2019 (14.0) to < 14.0.0.12980affected

Trend Micro, Inc. Trend Micro Apex One as a Service

  • SaaS to < 14.0.13139affected

References