CVE-2025-69260
HighCVSS 7.5Exploitation Probability (EPSS)
High risk75th percentile - higher than 75% of all known CVEs
Summary
A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.
Risk Assessment
Risk of service disruption by a remote unauthenticated attacker, potentially leading to system unavailability.
Recommendation
Apply patches provided by Trend Micro for Apex Central to fix the vulnerability.
Other vulnerabilities in Trend Micro Apex Central
See all- CVE-2025-69258Critical
A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.
- CVE-2022-26871CriticalActively exploited
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
- CVE-2025-69259High
A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.
Original NVD description (English source)
A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS