Lucene search

CVE-2023-52091

🗓️ 23 Jan 2024 21:09:15Reported by trendmicroType

Anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges

Reporter	Title	Published	Views	Family All 5
Zero Day Initiative	Trend Micro Apex One Anti-Spyware Engine Link Following Local Privilege Escalation Vulnerability	10 Jan 202400:00	–	zdi
Cvelist	CVE-2023-52091	23 Jan 202420:39	–	cvelist
Prion	Design/Logic Flaw	23 Jan 202421:15	–	prion
NVD	CVE-2023-52091	23 Jan 202421:15	–	nvd
CNVD	Trend Micro Apex One elevation of privilege vulnerability (CNVD-2024-04943)	16 Jan 202400:00	–	cnvd

Nvd

Node

trendmicro apex_oneRange<14.0.12849saas

trendmicro apex_oneMatch2019-

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex One",
    "versions": [
      {
        "version": "2019 (14.0)",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "14.0.0.12534"
      }
    ]
  },
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex One as a Service",
    "versions": [
      {
        "version": "SaaS\t",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "14.0.12849"
      }
    ]
  }
]

Source	Link
success	www.success.trendmicro.com/dcx/s/solution/000296151
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-027/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Jan 2024 21:15Current

7.7High risk

Vulners AI Score7.7

CVSS37.8

EPSS0.0004

CWE-59