Privilege escalation in Trendmicro Apex One

CVE-2024-58104

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Vulnerability class: Privilege Escalation

EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.