CVE-2024-55917

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55917

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

A

n origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

References
Link Resource
https://success.trendmicro.com/en-US/solution/KA-0018217 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*
History

25 Aug 2025, 18:26

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de error de validación de origen en Trend Micro Apex One podría permitir que un atacante local aumente los privilegios en las instalaciones afectadas. Tenga en cuenta que un atacante primero debe obtener la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder aprovechar esta vulnerabilidad.
References () https://success.trendmicro.com/en-US/solution/KA-0018217 - () https://success.trendmicro.com/en-US/solution/KA-0018217 - Vendor Advisory
First Time Trendmicro
Trendmicro apex One
CPE cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*

31 Dec 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-31 17:15

Updated : 2025-08-25 18:26

NVD link : CVE-2024-55917

Mitre link : CVE-2024-55917

CVE.ORG link : CVE-2024-55917

JSON object : View

Products Affected

trendmicro

CWE
CWE-346

Origin Validation Error