Trend Micro Apex One and Vision One Origin Validation Vulnerability Allowing Local Privilege Escalation

A vulnerability allowing local privilege escalation has been identified in the Apex One/SEP agent, affecting Apex One 2019 (on-premise), Apex One as a Service, and TrendAI Vision One Endpoint Security - Standard Endpoint Protection (SEP) on Windows. This vulnerability arises from an origin validation error, which could be exploited by a local attacker with access to low-privileged code on the target system.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation on the affected system.

Remediation

Users of Apex One (on-prem) should update to SP1 CP Build 18012 or SP1 Build 17079. For Apex One as a Service and TrendAI Vision One SEP users, the Security Agent build 14.0.20731 is available. Customers are encouraged to visit the Trend Micro Download Center for more information.