Trend Micro, Inc. TrendAI Apex One vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Trend Micro, Inc. TrendAI Apex One: 12 record(s), with affected versions and fixes.
CVE-2026-45208
High · 7.8
CWE-367 May 21, 2026
TOCTOU Race Condition in Trend Micro, Inc. Apex One
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2026-45207
High · 7.8
CWE-346 May 21, 2026
An origin validation vulnerability in the Apex One/SEP agent could allow a local…
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2026-45206
High · 7.8
CWE-346 May 21, 2026
An origin validation vulnerability in the Apex One/SEP agent could allow a local…
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2026-34930
High · 7.8
CWE-346 May 21, 2026
An origin validation vulnerability in the Apex One/SEP agent could allow a local…
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2026-34929
High · 7.8
CWE-346 May 21, 2026
An origin validation vulnerability in the Apex One/SEP agent could allow a local…
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2026-34928
High · 7.8
CWE-346 May 21, 2026
An origin validation vulnerability in the Apex One/SEP agent could allow a local…
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2026-34927
High · 7.8
CWE-346 May 21, 2026
An origin validation vulnerability in the Apex One/SEP agent could allow a local…
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2026-34926
Medium · 6.7
KEV High · 51 Public exploit CWE-23 May 21, 2026
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.
This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.
CVE-2025-71213
High · 7.8
CWE-346 May 21, 2026
An origin validation error vulnerability in Trend Micro Apex One could allow a local…
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2025-71212
High · 7.8
CWE-59 May 21, 2026
Link Following in Trend Micro, Inc. Apex One
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2025-71211
Critical · 9.8
CWE-22 May 21, 2026
Path Traversal in Trend Micro, Inc. Apex One
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable.
Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.
For this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console�s IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.
CVE-2025-71210
Critical · 9.8
CWE-22 May 21, 2026
Path Traversal in Trend Micro, Inc. Apex One
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.
Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.
For this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console�s IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.