Trend Micro Apex One Security Agent Plug-in User Interface Manager Arbitrary Code Execution Vulnerability

A vulnerability exists in the Trend Micro Apex One Security Agent Plug-in User Interface Manager, allowing local attackers to bypass security measures and execute arbitrary code on affected systems. This vulnerability requires prior access to execute low-privileged code on the target machine.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users are advised to update to the latest version of Trend Micro Apex One. The updated version for Apex One is SP1 build 13140, and for Apex One as a Service, it is the December 2024 Monthly Maintenance (202412) with Agent version 14.0.14203.