CVE-2023-52091 - An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations

Back Back to CVE browser

HIGH

An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations

Published Jan 23, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.31%

Description

An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

Vendor Trend Micro, Inc. Product Trend Micro Apex One Default
unknown
Affected
- ≥ 2019 (14.0), < 14.0.0.12534
Vendor Trend Micro, Inc. Product Trend Micro Apex One as a Service Default
unknown
Affected
- ≥ SaaS, < 14.0.12849

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Trend Micro, Inc.	Trend Micro Apex One	unknown	Affected ≥ 2019 (14.0), < 14.0.0.12534
Trend Micro, Inc.	Trend Micro Apex One as a Service	unknown	Affected ≥ SaaS, < 14.0.12849

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-59

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-56765
Advisory
https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-027/
Third Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-56765		Advisory
https://success.trendmicro.com/dcx/s/solution/000296151?language=en_US		Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-027/		Third Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trendmicro

Published Jan 23, 2024

Updated Jun 20, 2025

Reserved Dec 26, 2023

Link CVE-2023-52091

CISA Vulnrichment

Updated Jan 24, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-52091

Red Hat

No data

ENISA EUVD

Assigner trendmicro

Published Jan 23, 2024

Updated Jun 20, 2025

Link EUVD-2023-56765

GitHub

No data