CVE-2024-58104

Summary

CVE-2024-58104 is a newly disclosed vulnerability affecting the Trend Micro Apex One Security Agent Plug-in User Interface Manager. This issue grants a local attacker the ability to bypass existing security measures and execute arbitrary code, providing them with potentially far-reaching system access. However, it is essential to note that an attacker must initially gain the ability to execute low-privileged code on the targeted system to exploit this vulnerability. This weakness presents a significant concern for organizations running the Trend Micro Apex One Security Agent, necessitating prompt patching and strengthening of security controls against low-level attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.