CVE-2026-34927
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. The attacker must first obtain the ability to execute low-privileged code.
Risk Assessment
Risk of privilege escalation by a local attacker, potentially leading to full system control.
Recommendation
Apply the latest security patches from Trend Micro for the Apex One/SEP agent and restrict low-privileged code execution.
Other vulnerabilities in Apex One/SEP agent
See all- CVE-2026-45208High
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-45207High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-45206 but in a different process protection communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-45206High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-45207 but in a different process protection communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34930High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-34927 but in a different process protection mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34929High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34928High
An origin validation vulnerability in the Apex One/SEP agent allows a local attacker to escalate privileges via a named pipe communication mechanism. The attacker must first obtain low-privileged code execution.
Original NVD description (English source)
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.