June 4, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rilide Malware: A Malicious Browser Extension Targeting Chrome And Edge Users for Credential Theft – Active IOCs
March 25, 2025
Google Patches Chrome Zero-Day Exploit in Active Attacks
March 26, 2025
Rilide Malware: A Malicious Browser Extension Targeting Chrome And Edge Users for Credential Theft – Active IOCs
March 25, 2025
Google Patches Chrome Zero-Day Exploit in Active Attacks
March 26, 2025
Severity
High
Analysis Summary
CVE-2024-58104 CVSS:7.3
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2024-58105 CVSS:7.3
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Impact
- Security Bypass
- Code Execution
Indicators of Compromise
CVE
CVE-2024-58104
CVE-2024-58105
Affected Vendors
Trend Micro
Affected Products
- Trend Micro Apex One - 2019 (14.0)
- Trend Micro Apex One as a Service - SaaS
Remediation
Refer to Trend Micro Website for patch, upgrade, or suggested workaround information.
