CVE Catalog

CVE-2025-69258

Critical
Published: Translated: NVD NIST

Summary

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.

Risk Assessment

An attacker can gain full system control (SYSTEM), potentially leading to complete compromise and infrastructure takeover.

Recommendation

Apply patches provided by Trend Micro immediately and restrict network access to Apex Central.

Original NVD description (English source)

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS