CVE-2024-55631

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55631

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

A

n engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

References
Link Resource
https://success.trendmicro.com/en-US/solution/KA-0018217 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*
History

25 Aug 2025, 18:27

Type Values Removed Values Added
CPE cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*
References () https://success.trendmicro.com/en-US/solution/KA-0018217 - () https://success.trendmicro.com/en-US/solution/KA-0018217 - Vendor Advisory
Summary
  • (es) Una vulnerabilidad en Trend Micro Apex One que sigue el vínculo de un motor podría permitir que un atacante local aumente los privilegios en las instalaciones afectadas. Tenga en cuenta que un atacante primero debe obtener la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder aprovechar esta vulnerabilidad.
First Time Trendmicro
Trendmicro apex One

31 Dec 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-31 17:15

Updated : 2025-08-25 18:27

NVD link : CVE-2024-55631

Mitre link : CVE-2024-55631

CVE.ORG link : CVE-2024-55631

JSON object : View

Products Affected

trendmicro

CWE
CWE-269

Improper Privilege Management