CVE-2025-71217

HighCVSS 7.8

Published: 21/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

An origin validation error in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges. The attacker must first execute low-privileged code.

Risk Assessment

A local attacker could escalate privileges, potentially leading to system takeover.

Recommendation

Update the agent to SaaS 2507 or 2005 Yearly Release (fixes already available).

Other vulnerabilities in Trend Micro Apex One (mac) agent

CVE-2025-71215High
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges. The attacker must first execute low-privileged code.

Original NVD description (English source)

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The following information is provided as informational only for CVE references, as these were addressed already via ActiveUpdate/SaaS updates in mid to late 2025 (SaaS 2507 & 2005 Yearly Release).