Trend Micro Apex One (Mac) Agent iCore Service Signature Verification Time-of-Check Time-of-Use Local Privilege Escalation Vulnerability

A time-of-check time-of-use vulnerability has been identified in the Trend Micro Apex One (Mac) agent iCore service. This vulnerability allows local attackers to escalate privileges on affected installations by exploiting improper file path validation during signature verification. To successfully exploit this vulnerability, an attacker must first gain the ability to execute low-privileged code on the target system.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a local attacker to execute arbitrary code with elevated rights, potentially in the context of the root user.

Remediation

Trend Micro has released a Critical Patch for Apex One (Mac) to address this vulnerability. This update is available through the Trend Micro Download Center.